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(54) System for controlling the sHsiHfeutton ami use of 



(S?) A sysrern tor comrolirha. use and distribution of 
composite ;3igsial works. A digital ajork is comprised os 
a cioscnp-son part (7Q0; and s conssnS part The ctesorsp- 
fcco part contain* control intormasion tor \h& composite 
digitus wofK. The cor*^ pars stores the- actual Stgisai 
date oonspns:ng sh« composes digiiai wotit. The tte- 
sohpsion past f?00) is ksgic&liy organised « sir; acydk: 
structure, e.g. a tree structure, for a composite Signs: 
work each nods of the acycitc structure represents an 
individual ds$M work or sane distribution interees in Jhe 
composite digits! wfe, A nooe in She aeyeisc structure 
is comprised oi ar; identifier (701) ot the individuai work 



usage ssghis ;?04s tor She indrvtcajai digsiai work and a 
pointer (706.708} to the dtgaal work. Composite Oigitai 
works am stored m repositories. A repository has im 
primary operating testes, a server mode ssrio' a request- 
er mods. When operating « a server mode, ihe repos- 
itory m responding so requests to- access tjSgstai vvorks. 
Wheri operating in requester mode, ths repository (s re- 
questing access to a diktat work, A repository wti! proc- 
ess east) rsquss; to access a oocnposrSs dsgrtai srork by 
examining ms usage rights tor each individual digits* 
work Sound tn the description par; of -the composite dig- 
kai writ. 
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Description 

The prsssni invert! «n rcistss to the staid of distbsuSten and usa^s rs^his snSercemonf tor digiialfy encoded woess. 

A tundamantai mm facing ms publishing and intorrriasbn industdes as they consider electronic publishing is how 
•s So pt raven- she iinauftorr/ed and un accounted dtoMoti or usage of etse;r«»c&ify published maie-rials. EiectronscsHy 
published rnaisdals are- typfcaiiy distributad in a digsSaf torrn and resided on a computer eased system tiavmo, ins 
capablftty so recreate Shi; materials. Audio and video recordings, software, it-eoks and multimedia works as© ail being 
oieetfonicaliy pubismed. Companies in moss. trtctosfrms receive royattias for sash aosouroocs for do-twery o? ihg mats- 
fssiS, s g. the sale of an audio CD at a retail outtei. Any sjnaccouofoc! distribution ot a vsors mates in an uncases royaffy 
?<5 (e.g. copying tfta «<udto recording CD to anoihes digital medium.) 

Ths ease in wtsioh eieo;rook;ai;iy published «»rks nan be "cortesr-iy* reproduced arid dtstiibutod is a major concern, 
"flio transmission ot dlpitai works over networks ss com^onc-teee Qno such widely used nstwos-iv is \m iriiofset The 
internet ss a vwdesprsad nefvsosk facility by which computer users in many nnsversrEies. corporations and government 
entrteeororjiysicaic and trade ideas arid mfomtatfon. Corrsp uter bt; ■ > i?i boards founder) she ins<srnes anci commercial 
« netwark&sucfi as Compose?* csncs Prodigy ail©*? tor the posting and rt't?te«Q;Gt digital information information sary sees 
such as Dialog and S.EXiS/hiEXiS provide dateba&as of curr*»-s5 information on a wide variety of top i A x 1* facto; 
which w(tt sisacorbafe tr*« situation « i:he deveiopsnen; ana' expansion of the National information mtrostruejurs ffhs 
NM>. it is anticipated ibat as tno Ha grows, ins transmission erf dsgiia! works over networks wri! increase many times 
over ii wonid fits doskaols to riffee the Nil for dlsmbunon of dtglfai works wiihoijt the tear of wi;ios.n o { ^ snShorKiid 
r.cpvmg. 

Tha nxiS: stra^torwascf way so curb unsicc c-un-ed disir:bt«;on is 5o prsv<jn; un«yibor«ed cop*, no - M yansm:s.- 
Sion. Tor sxistsrsg rfiatsnais ihsfi are dissisibuied in dtgsJaS f;srri. vafious ss'agnaidsi ars ussd. si? tf;s esse of sdsw-ira 
copy p;oiSf;f:on s:;hof?!as whicd ifinit ma nwtow <sl eoo(©8 lhat oan ba m<jds or whtcn cor jyp; fhe ouipijt whan ccspysng 
is dsissteci havs bs§n sir:pfoysd. Anotiisr scftwis causes sottwaie so become disabled aftsr a prscfetsrmwd pemi 
2$ oi lltm \rm. iaps«d. A (ochnique usod for worksiafson sollwars is jo raqniio vt\si a sspoctai hafsiwar s d;;v;s;a trsiis! 
bapfsssnicntho workstation incrderfonhssoftmfsttoran. s.g.. sss US-A-4.9S2..0S4 emitted "Meshed and Appsjraius 
for Proieeftng CompuEs; So«vv«se Ui&ihg Codsd Fiifof Noiwork »• Coniorimion an Aalve Codod Hardware Devsco 
" Soeh dsvseos am provt;5sd irvifh the aoftwase mA ar® oawnoniy i«ti;rr;;d So as stonglss 

Yat: asiosnef schasrso :s jo Osstrsbots sosswara. but wnsoh rsqaij-as a "-say'' to enafois sis dso lais ts aj-npiaysd in 
se distribution schsrnss whsw 'dsmos" of she software are prodded on a awfom afoag with ths mim ptoauc?. The 
dssnos issn Ssa ssaofy iiaod. bus in osdsr to ;jso m ac!«ai product fha H«y must da p-jrofiassd. Thoss sahsismss do nssi 
hinsler oopysng o? ttte software once the koy ss purchassd. 

is ss an objecf of im prss&'H tnvsntioR to prcwid© an tmpsovosi sys!««» sod sneittoci fa conttoiimg 9m uss ancs 
disSrsb^Sion of dipiSa? wofka. 

The invention accordingly pfovsfss a system and mslhod as ciaimsd m she accornpany iag claisTis- 

A aysioi'r; lot cotsfroliisjo tsse and dssinbutfoi; of con)pc«iSs disjisai works is disclosed. A composite digisai work is 
coniprisod of ono or more indivktuai digital wesks. An individual o'igiiai work is any *tmm. anrai graphics! or video 
basset work that hsss boon translated to or created in a oioitai ftsm. and whfch con he mersafod using syllable rendering 
f:5$a«s SLiotias sofrwaro programs A foster containr.g ostoos mor«eNpa! «ot!<s nrsay no iseaSisd as a r;o:f;pos(i8ttig:ia; 
•so Viork. 'i no presaoS invent ion aiiows the ownor of an sndsvsdnaf digiiaf work So attach iisago rsghis to their work v*scn 
ate hosiorsd when the lad^tdijai digital work is incorporated into a composite digiiaf work. The usage fights tor the 
work define how 8;e mdtVKkiai Oiitliaf work tnay bo used and disSnbnied. Ttie aggregation ot ihe -isage tights of -bs 
inoivitfciat dspitai works ot a oornpowis ctigltal wotk. as weii as usage sigbts attached to the composite digit?.! #osk as 
a whoie dote bow fbs composite ptgstai work may fee ased.arsd d:siiibutsd 

A dsgiiaf work is comprised of a description pad and a content purl. The dascr ipf :on o-5rs oontairts cml>.<$ Intormafion 
for ths comoosits dsplta; work; T"ne content parr stores ihe actual digital daia ctompmrnq tbo cornposltc digstai work. 
Ttte desedption past Is logicaily organteod tn an acyc!;a srruotnre fo.g a tree structure.) Pot a composes digital work 
each oooe ot Stto aeyoko sfnioi!.ifa represents an mdMdtai d:gsiai warK.or sorm distrihiifroo intarost in fna digits! work. 
A noda m tha acyclic: si-ucsara rs compiled ot an saantstist ot the -individual work, nsage rights for the individual digrfal 
vC wots and a poiofor to tna digstai work, irt this represantaiion. the description part may naronslly be stereo aepstraiaiy 
on a ssgarare medium from tna centers past 

Composite dtglia! worses are stored m rapoorto- ios, A raposiioty t * comprised of a siorage mparts for storing a digifal 
vscsfk and its anachsd ttsags r«gtns. an extats»i intettaoa for rssowrtg and iransmkiina date, a procsjssor and a cltsjk. 
A isposltory Pas two primary opsratlnp tTiodes. a sowar mods and a requestor rwds. When operating sn a sowar 
snoda, ttts reposttoty ts responding to scaiesis So access- digital works. When operating m rec^oster moete. the repos- 
iiiory is caqtissting isccess to acitpat work A repository wis- process each nsqnesf fo access a coraposiia digiial work 
by examining tna usage rights tor each individual digital work found in ths description part. Access is granted II ths 
cdmposite di$ftai work a access to each ot she individual digital works car* as granted. AitssnaSively; ;f access !o ail the 
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fndtvteioaf cisg»3i works cannoi be granted, partial access can be gramee opiy so those incmfoat eigriei work* which 
gsatH access 

A system and maihoo' in accordance with the invention w« now te© described, by way of ejgtsrtpte. wan fsisreries 
to the accompanying drawing, in which :- 
•5 Figure 1 is a flowchart iitusttatmq a simple instantiation of fhs operation of she currently preferred embodiment of 

the present invention. 

Figure 2 is a block diagram siinstsatmg the- vanoes repository types and the- repository transection flow between 
wem ine currently preferred embodiment of ths pre$er» invention. 

Figure 3 is a block cssgfsm of a repository coupled with a cf®«« server m the currently preferred srrtaSfmsnt of 
?e the ptaseoi mmtison. 

f igures 4» and 4b are exsarrspies of rendering systems as may So sa stereo in the eerrently preferred embodiment 
ot ins prassnt invention. 

Figure 5 illustrates a contents liie feyoal ios a digits work as may bo infeed «\ the carrsntly ptefsrrsd embodiment 
of the present invention. 

« Figure 8 iiiustraies a contents fits layout for m mtWiW wc»k of the digital work of Figure 5 ae may be 
uttitzed m the c»rtsn!iy preferred embodiment of she present invention. 

Figure 7 iiiuslraies She components of a description otocfc of the currently preferred embodiment of tno present 
invention. 

Figure 8 iiiustraiss a description ires for the- CGttfw ttte layout of She digital work fiiustnstsd m Figure S 
28 Figure 9 ttiustrates a .portion ot a description ires cor responding to me individual Gs$m work frustrated in Fio*ir« 6. 

Figure 1 0 illustrates a layout for the t ights portion of a description block as may be wmm in the cememiy preferred 
embodiment of the present invention. 

Finders ti irs & description tree wherein ce-tarn d-tsioeks nave PR;MT usage and ;s used to illustrate "stries* 
and henisn; 5 rules for resoivirso. usage rights conflicts. 
3$ Figure 12 re a block diagtam of the hardware components of e repository as are sjtifeeci in crssrefrliy pnsfetred 

embodirr : ent of the nresenf invention. 

Figure 1 3 is a biock Qmqmn of the iuiiciionai (tegjcsi) componente ot a repository as sm eiisiKSC in !he currentiy 
piofesred afrsboditnen! of the present kweftiiort. 

FiquffS 14 is tft»9t« iiiust^Hina !he baste nornponsnts of a usarje rsrjht sn iiia cure^iitiy preferred anisooirnani ot 
the pfas<5e! irtveefifen. 

Figure 1 5 w\& fhe esego fiphis grmztm of the crersnhy pfoionod sa*«fiinent of she presort; stwsnhon. 

Figure 16 is a flowchart iitusttcriing the steps of esrfiiicsria dsiivssy. Mm checking and periomwce iesting as 
porforfneci in a s^gistretson iranBaeston as may bo eerfosreBd in ;t?o cuftisrttSy pt^fanad erc^oc^meni oi it)s present 
invention. 

se Figure 17 is a fiowchart iiiustrating ihe stsps ot sessiori intextimioft SKchange and ctocK synch ionization as may 

da parforrnad in the cuirsithy eteferrsd st^bexjKTKsm of the presen! invention, after each repository m the reasstratior! 

transsoiion iias syooesstuiiy completed iba steps dascnbad te Figure t6. 

Figure 18 is a iioerchari liiustfatirsg ;fta basic Slow ior s usage transaclbn. including t:ho comnton opening artd 

eicaing sfop. as m-sy tsa pnitonTted «i the cneeniiy praiort^d ornfsopifnorsi of the present invaniton 
•so Figure tSssa steta cftegmm ot server and client r spostiories in aocosdencs with a transport pfotocoi followed vvhee 

moving a digiiai work from the server so the client repositories, as may he performed sn the cusrsniiy ptof errsd embod- 

iment of she present invention. 

A system for controlling use and distribution of digifai works is disciossd Tno present invsf^ion is directed te 
supporting coremercia! transaciiorrs invoiviric, digitai works. 

Herein the terms "digiiai work 4 , "work* end ? con!en; : ' refer to any work that has boen eadeead to a dsgitai fepre- 
sssntafiors. This would ineiede any Siudio, video, lexl. or multimedia work ahd any accempa;?ying syterprsstor (e.g. soft- 
se warn) Ihat rns-y be ! : eq«ired tor roc r eating the work. The terra 'composite work sefers j.o a digiiai work eomprissd of a 
colisefton of otnar digitei werks. The fsrm "usage rights* or •rights" is a term which refers to rights granted to a recipient 
of a digital work. Qsnoraiiy these rigtits dafme he» a digiiai work can be used and ii it osn be fcrlher distrihetsd. £soh 
usage hgh! may have one or mora specified ooriditiGfjs wt'ect; mtisi be satisfied hefof a the right may be exercised. 

Figure i is a h-gn ievei ficwcharf: omill Ing various dstai's but wttien demoneiretes the paste oporation of the present 
ifiveniion Reierfing to Figure 1 1 a creator creates a digital: work, slot; 101 . The creator wis! then determine appropriate 
usage rights tmd lee's, attach there to the dlgita! worts, and store them in Raposaonj 1 . step 1 0S. The cielefminalien of 
appropriate usage nghts ano fees will depend on vanous economic factors, The digltei work remains secereiy in Re- 
nositoiy t titHS! a request for access is received. The request for access begins with a sessiort initiation by another 
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repository. Hare a Reposition/ 2 uwvs&m a session with Repose/ t. step iQ3. As wiii be described m greats? dsw 
beicay tms session initiation snciuc&s stsps. wttish hasps to mure that She respective repositories are trustworthy. As- 
suming thsi a session can be 8Sfc»biisrt«c!. Ftepostton/ 2 may then request access so ihs- Ds^tet Wbrtc to? a stated 
purpom step i04. The purpose may be. tor example, to prstf tn» digits! work or to obrsm a copy o! the digital week 
•5 The purpose wis carssporsd to a specific usage ngbt. in any mem. Raposrksy 1 cheeks ins nsape tights associated 
with the digita; .vwwio dsienwos- * sn<& access to m t%$m work may ce granted, step 105 The check ot the us&ga 
rights seseniiaiiy invokes a determination oi whether a right assoctatsd wgi; the access request has been attached to 
medtgrntf wort; and ifuti contit-ms associated win the right are ssitsftsd. if me acorn is denied repository i tt-frrsirates 
the sm&m wtth an error massage, step 188. if access is granisd.. repository t transmits »»« gigiial work to repository 
?c 2. step 10?. Ones ihs dsgrtai work has bees transmitted so repository 2. repository 1 and 2 each gsnerata biiisng inion 
fjiaison tor the* access <s*is:fc is transmitted tea credit son/si. step "OS. Such Posbie biiiing rspatsno. m done- So insure 
against attempts to circumvent aw bfflmg process 

Figure £ iiiusiiaias she basts Interactions feetwssn repository types in She present invention. As w£jj become apparent 
from ftgurs 2. the various repository types wiii serve different functions. St is fwo^mntaf ihaf repositories wsi! sham 
« a core set ot Icoctionaiity which writ sn&s<® secure «nd feos>tecs commariicahoos Referring io Figure 2. a repository 
20t represents ths genera! instance o! a repository. Tbs repository SOt has two modes oi operation: a server mode 
aria a r-spusssiei mode. Wnae m ihe eajver reode. the repossSojy wtH recasv'seg ar)P pmcesssng accaee nsquesss to 
digital vkotss. Wnan « the reojyosisr t-nrxie. the rapository vvrii Po ioiiiating raqiiasss io access Oig-ia; works. Repository 
2Qt is ganss&i «i the sanss ihai its ptitmty puiposs s$ as m axci'iangs mediDi-rs lor dtpstei <mfim-. Durwi^ the co«ise oi 
28 oparisttoo. ths reposaoty 20* may sorrsmpeicsts wtn a p&r&isty ohoSMsr rapos:ioriss ; rtamsiy aiiihoiaaiion rsposiiory 
202, rsnderseg repository £03 and masts? repository 204. Communication fcstwssrs repositorios occyrs vl&ms a re- 
pository iransaction p;otocoi £05 

Oomsiiiiiiication x^sh m ansXKmtmm tsmmvyy SC2 may occur sr-tan a digital work bsioo ;5caessso has a condition 
;e«utfnio an suthori/atiors Coricepisjaily an aeinon/aiioo is a rjiojisi csrtificasa ecoh iiiat possession ot the csms'icate 
ss required -o pain access to the dipttai work. An a«thcstiKat!0f} is %etf a dspitai work tfiat can he rnr>vad beiwosn 
ropesitofiss and sedjscted to teas and asage rsgttts conditions An anthenzation may be required by notii rspositott&s 
(nvovetj in an acosss to a digital wofk. 

Gorfiinuriicaiior; wsiii a randermg rspoastosy 203 occuts m eonr;eet:oo vriih the rstid^tittg oi a Pigfiai work. As wsii 
bs described m areatsr detaii oaiow. a rencsemg repositciy is soiipfed wm a randaring dovtce je.g. a pamt davies; 
srr so comprise a rendering system. 

Goreitiynieaiwa witn a nitsstsr reposiirsiy .SOSoccttrs tn crMinactior; mm obiitifung an idtsnti&aiion Citdificala. ision- 
t:t'ication coriilicatos aro the means py which a ssposttory is identitiod as "ncstwodriy" The ^so ot :dont:t'ica;ton codil- 
icrties is Pascrsbcd hstow wsSh inspect to the repsstraisori transaction 

Figtire S iiinstrstes the repository 80 j coupled to a credit esiver :m. Tns credit server 301 <s a davice mm 
3S accytTiiriates biitsng sn'on-natiort for the pepostoy 201. Tlte credit server 301 coiTirnupicatea with rspositoiy 201 vis 
btiiing ii-afisactfOits 302 to iccoid biiiiitg tttarisactfoes Biiisng transaoiiona ere reposlod io a biiiitiq cieanriphoitso 303 
by ins crag;; ssrwsr 301 on a periodic basss. The credit server 301 communicates to the siiiing cteanrtQhoiisa 303 via 
cieaimgtiorise irnnsa ebons 304. The fiesrifiehoess rsafisactio.ns 304 enabie a secriie and encrypted transmission oi 
iaiofmaiion to the biiisng oieaonghonse 003. 

JC 

J3£lMimjVST^ 

A fersdering system is gsneraiiy dotinsd as a system comprising a repository and a renoering devxs wh:c.ii cars 
render a dtpitat work «\io its desired fctrrs. Examoies ot a rsitda;:ng sysiora ;nay bo a eoiTtpvtsi" system, a digital audio 
systont. or a pnntar A rondenog system nas the Sims security icatnres as a repositcsy. The copping o! a ieadofing 
repository With rhe rendering davsee may occur in a manner saitabie tor the type ot rendering gevica. 

Ftgiji's 4a iitusitales a pnr;mr as ar; exampie oi a rendering system. Be'sinno. to P:gt;;« 4. pfintss sysisn"; 401 ties 
ccntainad fharoin a printer repository 402 rsnd a pnnt dovee 403. it snostid he noted that im tb« dashed tme detining 
printsi: system 40 1 delines a mam system docstdaiy. Commnntcations wstrtsrt Ihe boundary arc assemed to be secpio. 
vC Dapsntiing on ihe security teml the bonadary aiso r-spresanis a barrier intended ks provide physical intepniy T:he 
printer repository 402 is an instantiation ot tbs ■■rsndsfing repcMoty 205 oi Figaro 2. Tna printsr raposirory 402 wiii in 
some instances eontam an epbems-at oopy ot a dipiiai work which ;«« untii it is printsd out by toe priP! en-psns 
403. la older instances, the printer ieposiior y 402 may comam digital wort® snch as fonts, tsbich will remain and can 
be bil-sd eased on use. This design assures thai aii commpnication isocs between printers ana pftniinri cietacss are 
encrypted, ar-iess they are w-;th-n a physically secure boundary. This oasipn imtu?<$ siimmates a potsntiai •f«tii! k point 
rhroagn which ih® d-pilat worlr coi-id sse impropariy rebbttnoa. The prsnlor device 403 represents rhe printer cempenents 
ysos to create the printed output. 

Aiso iiisstrated «rt Fsgnrs 4a is the repbsiiory 404. Tire repository 404 is coupieo to the printer rspositoiy 402 The 
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repository 404: represents an external repository which contains digital works. 

f igure 4fo is an «xampis of a compuisr system as a fmismg system. A computet system may esmtsfute -a h*nu it: - 
function* ctev>ce since it may executs capsaf works is.q software programs) ma dispfay dibits! works (e.g. a digitized 
photographs. Logieaisy. each rendering device cart he viewed as having its own repository, although oniy one physical 
•5 seposilory is needed. Referrtr;^ to Fiacre 4b a computet system 4t0 has contained sharem a dispisy/exscution repos- 
itory 411. The dlspsayrexecution repository 41 1 is coupled to display owiae, 41 2 and execo! ton device 41 3 Tm cashed 
to surrounding She compute; system 4f0 represents a security boundary within which communications are assumed 
to be secure. The dispiayfexecutiGn: repository 41} is turffw conpSsb to a ersdtf server 414 to report any tees to »e 
hiked for access to a digiiai work and s repository 415 tor sccessifig digital wofKs stored fhersin. 

Usage s^tts are attached directly to digital works. Thus, is is important & cads; stand the sircetnre of a digilai work. 
The structure of a digital w m pat tioaiar cortiposite. diojfat works ; may be naiuraiiy organised Into tin asyeiic structure 
« such as. a niarajchy For example, a mag&ztrse has varsous «ri«te& and photographs, when ro^y hays been created 
arid are ownsd by biita;erii parsons Each of the aifscses srsd photographs may fsprssern a nobs :n a iwarefcica! 
structure. Ciooseqaentty octrois, s.s usage rights, may be placed en each nocks by trie craaior. By anaoiing control 
and ies biHfraj to bo associated with each node, a creator at a work can da assured tnat the rights and leas ars not 
circwiv'snted. 

in the currently preterrod emcodimont, she life iriforrnatiort tor a digital wort? i$ divided mio rm tries: a "contents" 
fiie and a "description tree 1 ' file. Rom the perspective of a repository the "contents* his is a. stream oi addressable 
byios whose format depends completely on tne interprets! used replay display o; print the digitat work. The- descnplioo 
tree iiis makes <t possible to examine the rights and fees for a vwk mbwi rstarence to the oontsnt oi the diniiat work, 
it sboytb be noted mat tba t«rm description iras as «sed herain refers to any type ot acycisc structure used to represent 
the retattonship tsiSwsan ttta various components ot a dtofiai work. 

Fiacre 5 sifostrates ihs layout ot a contends tiie. Referring >c t-ipcrs 5. a dso,;tai w-ork ts comprised: of story A 610, 
aoYsitssmern 5!i story 3 S12 and story C S10. it is assurnad thai the cispjiai ^fk is sio;eci slsbing at a «Mm 
address d 0. £ach of the pads oi ids diofei work aro stored mmtty so that story A StO is stored at anproximatsiy 
addresses 0-3Q.OOO. advertisement 511 at addresses 30.001 -40,000. siory S 512 ai: ado'resses 40.001 -&0.00O and 
sa story C S;3 at acld;essas m.Q0\-B$K The detaii of siory A 310 « iitsslratad in Figure 6 Bsterdnti to Figure 8 : lbs 
story A 510 is turffw broken down to sPovy tax: 814 sksrsti tst acdratrs 0-1500. soldiof photo 615 ai iKtdressss 
1 SOt- 50.000, graphics St 5 siored at addresses tO.001 -25.000 and sidebar Si? stored adbrsss 25.00 i -30,000 Note 
tb«* ibs data in the cameras iris tmy do sonipsessed (for savsng sfotage) ot encrypted (for security). 

From Figures 5 and 8 i) is readriy osasrved iba; a digital work can be represeniod by its eomponani pasts as a 
;k hisrerchy The dssedptiorf tree ior a dioitai work is comprised ot a sst ot rektecs descriptoi shocks, {d-biocksj The 
contents oi ssch d-btsck is described wttd respect to f ig«rs> ? . Rsieft inp io Figure 7, a d-diock 750 incisdes ar; identiitor 
701 which ss a unique identifier tor tne work in the rapository a start tag address. 702 providing the start address of the 
first byte oi tne work, a isngth 70S giving the number of bytes in ths work, a ncthis portion 704 wbsrem ihs granted 
asagn rights and idesr staius daf a are maintained, a parent pointer 706 for pointing to a par ant ri-htock and child pointers 
-so 70S for pointing to the chad d-bfeekS: in ths ccrreniiy preferred emcodirnen!, the kisnttfier 701 has Swo parts. Ths ttrst 
part is a aniqus nunibar essigned to the reposkory upon rnanciactcra. Ths secotid pan is a unique nymner asstgnod 
to the work upos? crtjaiion The rights portion 704 wssi cottfatri a data sirncts;e : such as a k»k-up tad!e : whorasn the 
various information associated with a ngh? :e mainla.insd The information' faqmrsd oy the respective usage dgbie :s 
desonbad m mote deiaii deiow D-btocks totm a strict hierarchy. The top d-bScck of a wotk has no pasent; ai) oibs; d- 
■ra blocks have ons parent. The retaitonsrsip of t.iaage tights Peiwaeis oarsiit arsd chrid d-bfocss and now conflicts are 
i'esoived is described bsiow: 

A spsciat iype oi d~biock is a "shsii" d-biock A shaft d-btock adds no new content beyond the corsteni o! its parts. 
A sbefi d-blocK is used to sod nobis and fee mionnatioa typicaiiy by histrttjutors of digifai works. 

figure 3 illustrates a description Ires for tne dlgtas work of Fsgste 5. Rsferntig to Figste 8. a fop d-Piock SS0 for 
5C the digital work points io the various stones and advariisemsras coniained therein, i-iaie. ths top d-btock 8&D points to 
d-biock 82i i representing story A sto?. d-bioek 822 {i'epresanttrtg the advefiisemant Ss • }. d-P:|ock 823 frepi-osenfinsj 
story. 8 SI 2s and ai>d d-btock B24 (fepfecenting sfory C 51 3). 

Ths portion ot ths description free for Story A 510 is siiustmtad m Firjuro g. D-bkjck. 025 represents taxi 614, d- 
bloek 920 represents pneto 6fh. d-piock 92'f represants graphics §16 by and d-hiock 928 represents sidebar Si?. 

The bghis portion 704 o? a descriptor bioek is fuohsf illustrated in Fipure 10. Figctc 10 illustrates a slruefuru which 
is fapeaied in the rtgnta portion 704 for each righf. Referring io Figure 10, each righf will have a right code tiotd 1050 
and status information ftpid 1052. The right code fteid toso will cofitain a unigue code asslgnsd to a right The status 
isjlonnation field 1052 wilt.conrain intottiiation ietaiing to the state of a rrgbl and the digrfat work. Such iniotmation ss 



5 
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indicated bsfow in Tabis 1 , Tha rights as stored ir> the tight* portion 704 ■may typically bs in nnowlcai ores? bassd on 
the ngbtixxm 



TABLE 1 



OiSSTAL WORK STATE INFORMATICS 




Vsfus 


WW 


CQpios-ln~yso 


fender 


Accuntft oi *h$ mml&roi copsas of a worN sto in usa tocrsro&rrtad wha^ 

■;5fK- l i: "5! WjV-y O&wiJ. \iov> tf;:i ttM uswyi w: 3 to Jam : f:."^Ht>U 




■t :U:y-u;;il.rj. 


■out 






33 r^.K.CitVit .! i.^is. W ;>;• ! > H 3s. 34? sJKM !aV! "•-Vij s >y *>-- ^ • ^«vi tji.tw U« vl'iCJf VvlyJ ^ 


Remaining-Tsms 




im&c&or d the remaining tlm© »i use on a msiesed dociimera rsghl- 


Do; timon i-Descr 




A sifmg ccmiasfsrsg various toen&iymg Wermaflon «&ou* a document Tso exact 
format of *.h« * not spsc^ied. 6«t si can include information sucn as & p:.»bit&h«f 
name, author name. !S8M numbs r. and so on. 


B«¥€tiW6-OW«8r 




A handie stterviifymg a rsvenisoownnr to; a digital work. Thss is used Sof fepoitfng 
usags fcss. 


pL)b::caiioivDafe 




Tha dam tbst she dlqita) work was published. 


HiSiClV-iiS: 


History**^ 


A m o! wims recording tne roposfor iss and daies fry operations tbat copy, 
transfer, backup, or re store a digits: mfo. 



appfoscr. tor rssres&rrfmg digtaf works by sopas-aiirsg poscripnon daia trsyrs conisnt asswnos t^ai parts of s 
fils areoontiguotisbiittakes nGposrEionon tPssctuas ;«pi-sssmaiion of cfsitent inpsrtioufef. :t s&nsulral tofrsqi^stion 
ot vsnmmt oootani ■o£i?vssaivi;a;;on may Jafas m vo&cl oria^tsd app!XS5ch. it w%M m imtml to represaat ;;;>ntani as 
objects, in prsncipie. it may bs conveiiieni to ttavo content objects that sncfoPe the biffino. struaturs and f iohta intormatson 
that ss iopsossniixi --n the d-biocks, .Such vat«!tiQ»s ifi ths desigr; of tha represefi!atic»5 ars pcse^bie and ase viabis 
atipmaiivas m may miroduc« pi'ocssstng ovemead, $.q. m tritmptmfam of ins ob-jscis. 

Dl^itas works ars stored in a !'eposrto;y as pan of a bisrarchicai t;i& system. Fdmiets tatso \%rm*i rfirsc-orses ano' 
ssib-dsrscsoriosi mmm tha digiiai works as vvoil <js otnor foldars. Digfeii works and ;o:d?;re in a ioictar ars ordered m 
atpi-abeiicai order. The di-gitai works ars typab :o refiscf how ids Urn a-e used. Usage nobis can bo atiached to toidnrs 
so ;hat ih« fsAJer Sssif is tra-Jtsd as a digital v*>rk. Access to ibc toltter wontd iher; bs bandied in the sarfsa tasfison as 
any otnor di^:f ai work As <*m bs dssc.r *sd in mors <smA fesm ino CGtttems ot tbs fOidsr aro subj^st to mm own rsgpf-s 
Moreovor •'■■a nxanngnmant rights may bs anacMad to tho toicJor which def m how toids' contents can bs nxanagnd 

J(J .ftlTM'i'.il N & ,U § ASfe . Oi §.ljl § .ISt .P.jQ j TA L WQR K 

It s$ itindamefiiai to ;hs prssairi sr;vcnt :on thai this ass:;© rights ars msied as pad: of ;hs titqm work As tbs cisgiia! 
work is Oistr ibtiisd tbo soopo ot tdo grantsd usago rights will remain ids sanis or may no narrower:. For sxampis. wPon 
a digital work & bansfsirnd from a docomsm ssrv&r to s rsposltory. the usage fichts may :nefuds the nght to loan a 
copy Jot a piedisfsimsriad partsd of fis^e fcaiisd ths origfam fightss. Wtsan t?-s repository ioans out a copy of Sbe dipiiai 
work ma usa^s rs^his in the ioaasr copy tcaiiaci mo next ss; of r-phtsi coriid bs sal to proPlmt any furihsr ngbts to ;oan 
oat the cosy: The basse idea is that one cannoi g^nl mors ngnts ihan tbey hsvs. 

Tha siiaebmen; of ustipe rsghis «to a d:gttal work n-ay ot»>;r in a vansty of wt-ys. if the usage r^hts wH ba itio 
mm tor an onitrs dsgstai work. Ibey eouid &s attached s*sn lbs oigitai <mx ss procssssd for ciwsaa in the digstai mft, 
tiarvar. in the cass ot a d:gftai work havsr-p ciififasnt usiaga nghts foi the vaaoas comfionsnts, m© cm bs dons as; ;bs 
digiiai worti is baing oioaiod. An aaiboring -ooi or dipliai work asson-inling iooi oouio so mtexi Knlcb providss tor an 
atit&rnatad process oi aftaohing tbs usage ngbts, 

As will bo described bsbw, whan a digrtai wotfc ts copied, transferred or ioanocf. a *m#X sot of fights' cars bs 
spsciiisd. Thphisxt sot of rigbis" m Pa aitacbad to the digital work as :r is transpohed: 

f%&S'$$$'i/ e $?i{£ ^?&f$fi! f%i£$tti,& 

Bscauao aaob pari of a digltai work may have lis own usage rtgfs!« ; tbsrs <m do mstancas wt;pfe fbe figdts of a 
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"eofitsined mtV are diiiersn; from sis parent or container pars. As a resait. eonttsot rules* must se established to dictat e 
wtuw ana howa right may fee exercised. Ths bie;»fen:eai structure of a d-giiat work t&aittaies tftee^Jotesrfient of such 
ruts*. A "stria* rwie woute be as toitows: a ngnf tor a part in a diktat wons ts sartct toned it arsd only jf « is sectioned 
far the pad. for ancestor d-bsocks containing the part and for all ciescendeni d-btoeks. By sanctioned, it is meant that 
•5 0} each of the respective parts must have the sighs, and ;2s any conditions to; exercising the rsghi &m satisfied. 

it aiso possible !o statement the present riveniiori mmq a mere ismem rufe. in irse mora teowsnt wis. «eeass i» 
the part may be enabled ro ths descendant pahs iwrssch have she right, bat access is denied to tie bessstxients which 
do not 

Act etrampie of appiyirre both the strict ruts and ienient is illustrated with feteraocsto Figure 1 1 Referring io Figure 
?c tl. a root d-bioek it 01 has chad d-nioeks n 02- it OS. in this case. ;ooi d-bioek represses a m&ga^ne. and each oi 
the ettiJa d-bioefcr 1108-1105 repressers* artieies m the mao-axine. S uppose that a rsgnest is made to PRINT she diktat 
work represented by tsot d-bioek: }j&1 wherein She strict rate ss tot-owed. The rights tor the root o"-bfock 1101 mi ootid 
d-»Soekgli02-1tOSarethsn sxamsn-jd tola-Stock 1101 and child d-bkxks 1102 and \ tOcUtavebsengnMoiedPFtiniT 
rights. Chiidd-Wosk 1103 has not been granted PRiNT rights and shikt d-oiock 11 04 has PRSNT ngnts conditioned on 
« payment ot a ueage fee. 

Under the strict sale Ida PRiNT sight cannot bo exercises bees use she child d-bioek doss not have the PR hi! oght. 
Utwtef Ida tertians rm, tbe rests; woafct da different T ha dtgstai works represented by ohiid ©"-stocks 1102 and ti05 
couid be panted and tfts diptfat work represented by d-biock 1 504 couid bo printed so loop as the y&sge fee is paid. 
Oniy thedigi-ai wwH represented by d-biosk H03cousd not bepnn;ed. Thss sams tesuit wouid hs &ccc»»ixSiatje<3 andsr 
28 im slant faia if the rsqnasis were Oirrsnted to sacti <st tna mdivwStmf <tog®m works. 

The prssent invontson supports varfotss eonibinaitons ot asiavving and dssasowsng access, iV-ofeoypr as w$ be 
dfiscribod bsiovx. shs usage oghts qrsrww permits ths mum oi a digisa: wodr to spesiiy si cortsrraiftis may bo imposed 
on the ajork by a sontasier pad Ida manner m which dtgiiai wo; ks nitty bo sanatiooab bscatsss oi nsap,s rtpbts conftssts 
wousd be implementation specific and wosifci depend on the nature oi the diplis; rsrorks. 

ss 

in iho rlcscsipiiot; o! Figura 2., it was ittdioatsd that roposrtoiiioa corrso sn vanoss kurm. A!i rsposftorfss provtdo a 
core set of s3Atsc.es tot ;no Sransinission of Oigtisi wstis, Ida manner in «*ucr> osgitai works are rs)rohanged is the oasis 
se tor aii iraiisaction &«t«e8n i-apositortss The various rsposstoy iycas differ ,« ihe uirimate :ijnciions that tiiey pe.-tam 
Piopositortas may bo devioos idanstsssvos. or they may da innorporaied into other systems An esssmpio ts -he randaong 
repository 203 oi Figcre 2. 

A repository wd! have aaeocsaied wsh ti e rspos:toiy ideitSshcf. Typicaiiy. Sjb repository (ctenttewotsid be a unique 
number assigned to mo repository at tno wm oi manntacixifo Each rpposkory ym asso oo oiassstied as besng m a 
-is parkciiiar security ciaas, Cartarn CGrnrnunseations and transactkins m&y ba conditioned on a raposisory being in a 
pariicaiat security dass. The varfoss security oiassas are base; sbsd m greater detaii bsiow. 

Ac s prerequtsiie to opetanon. e rspos-ttory wif rsqiiiro possession oi an identification ceniticste idanitticaiion 
coiiiheataa are sftctynred So pievsni totpty atrd ase tssnad dy a ^astst repository A master rsposstoty piays the tola 
oi an auttKWZc&oft ;*gent to enabio iapositotitss to ractstve osgttai vsrorks idantiiicatiOft oerttitcaies rrststt »e apdatod on 
•so a perrcdio oasis identification osttrficatss era dosensod in gresssr detaii betcw with respect to tire fegistration trans- 
action. 

A repository t;;ss both a hatdwata and fuiKisooaS atnbrsj'itrient Ths ian&lxxwi stmsxixmrit » typicaiiy soitwaro 
executing on the hardware anifoodtment. Aiternativeiy. the fencttodai esftsodtrmm may be embedded in ins hardware 
embodi'Tien; such as an Appiicstson Specifsc intsgrnted Citsus. (AStCi chip. 

The hardware anidooietani or a repository wtii no ersaiosed in a sscora hosrsing wnidi « comprontisao. may cause 
the repository to be Oisasieo. The basse components ot the hardware embodiment oi a repository are described with 
reieronce to Figura 15:. Refsii ing to fsguio 12. a iaocsiioty is comprised of a processing means 1200. sfesago syststti 
120/. cioek and sxtsrnsi ioledace 120S. Tde pfooeasing rnsans I2di}iscofnpf;seci ol a processor eisment 1201 
and pivcassor rnefiiory 1202, Tiie pressing maans 1201 provides contfoiiat repository rraftsisctio;? and usage rights 

rra transaction functions lor tire rapcrsiiory. v^kxts functions sn the ijperaiien of ihe repository seen as deciyption gmdxsr 
danomprsssion ot digitai works and transaction messages are aiso psdormfsd by the pfoosesino means 1200, The 
pt'Qcsssot eiemem- t£0i may da a miciopiocessor or other suitatjia cornpytsng cocr^ortent. The procassoi" aiemory 
1 202 would typicaiiy da fydher contptisad ot Read Only fvi anrortes (POM) and Random Access ^aniones {BAM}. Such 
fnonrofies woeid contain ;no software instructions atiii^sd by the processor ataman; ;£0t in performing the fonctions 

ss oi tha rapository 

The storage system 1 S5? is f rffthe r rrompt issdof desertptorstostge 1 203 and con-ant storage 1204 Tbe description 
ire® storage 1203 waf store ths osscriptiori tree tor ths digital work at>o she contsnt storage wiii store the associated 
assent . The description dee storage 1 203 and content storage 1 204 need not be of She dame type of siotaga mediarrs. 
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oorare they neeassanry on m$ same prtysteai time*. So for example. sr;s descriptor storage a S03 may $>s stored oo 
3 solid slate storage (tor rapid retrievst d the description ttse tniotm&m}. wr»te ina centers storage 1204 may be 0.1 
a hipd capacity storage such as an optical disk. 

'ft to clock 1 205 is vsod to time-stamp various time Pased conditions tor usage oghts or tor metering usage tees 

•s which may fee associated wish ihe digital works. The clock 1295 will tmn m uriinfefrupi-soie power supply e.g a 
battery, in ore*-;:' to maintain the integrity of ins tim^-stamps. Tins external intsttaes means 1 206 provides tor ths signal 
connection to other repositories and So a credit server. The external interlace means 12o6 provides for the exchange 
of signals via sneh stancmro lotsrfnees sucn as RS-23S or Personal Compuisr Manslacisrars Card s rsdust ry Association 
(PCMCIA; standards, cr FDD: The oxteioaf snten'ace moans 1206 way also provide network connectivity: 

?a The fneeiiorsat emccidimsnt of a repository ® described with reference to Figure 13. Rstemrtg to Figure IS. the 
functional rimhodirneni ts consptissd ot an operating system 1 301. core repository services 1 302 usage transae-lson 
hsmlters 1308, repository specie functions. ;3G4 and a mar interface ;305 The operating system issf is specific 
to !h«s repository and would Sypscairy depend on She type e! processor being used Ths opetsitlng system 1 30; would 
also provide the baste services for ccnlfcilif.g ana inferfaciop between Ida baste components of ths roposaory. 

« Ths core repository services f302 comprise a set a! ianctsons rsqeireo by each and every repository Tne core 

repository services -302 include the session invasion tssri&scfcons which are defined in c-testsr detail below. Tnss ssi 
of san/scss also snciudes a gsnene SscKot agent which ts used tcs *ptmch* a <%t$m tie&tet and a gmsm 8»^hor«!9Jio« 
ssrvsr for proos-sstng aa-norffation soaofioaitons Dt$t&i tiokeis and aaif>or»;5S:ons ara spscifsc. rnachants^a for cm* 
troSiir^g ihe t&sJr&uiior; arid use o? die:i:ai works and are dsjsonbed m aiore d-jiasi b&kw. hfcie ttsat coupisd to shs com 

^ fsptJsisOfy ssfVicss ar« a piuraisly of idoajiissation corntisaSss 1306. The idoaiiiscation ce:rt:f:ca:ns 1308 are raq-israd lo 
anabss xtn vm of ths repository. 

Tf-s usage tsanssctiofjs hand!s;s 1 300 cernpssse fanctfonairtv for p-otesssng access feque&ts So diojiat wesks ar;d 
for osffing fsas nasao' on accass Ths wsapa SransBcttoas sappoaad w>!l be Prilareris lor aacn r-sposaory !ypa. For ax- 
arrtpis. ii ms : y no: bo naca&sary for some repositories* to tmrt&v sctsss rsq^ssts tor digital works 

ropossiuxy spscsfa: iaricaonajsy 13W eoirsanses fnacisonahiy the; ss wfaqu® to a repository For esarnpie. the 
master repository has spgca&t mm lonsiny for sssum^ osgiias csrSif-catss and maim*mitt$ aocry pSicn S<ays . The repository 
apeciftc twnctionaiity 1304 m*i& wind© ths user iotsstace implsrYisafaiion for ;he fopository, 

$%> 

For soma sJSqite: works !hs Josses naasrsd by any menvk^m atsfaotje of uoauthori^ed copy ing ts SnssgstiUcara aad 
the chisf sconomrc ooncarn ties :rt assuring the convenience of access and iow-ovorhaad Wmg. in &uch cases, slmpis 
ano sr;r;>:pensive f vandPeict (eposisofsss msi netwrsrk-basad woricstHjtxsns may S5e sasiabia fep;Bi)or;;;s, even Stsrsugf ■ -ha 
maasaros and gnaranisiiis 0! security ara mod««t. 

; f s A1 the other oxtrame. sorns digital works sacn as a digital copy ol a first ran movse or a bearer bono or stock 
certificate wt»fd &e of very tiigb vasne so thai if s& ciwdoni So ernpioy cantfosi ar;d tasrly eiaOorase security iiieaseres to 
an&nra that thsy are not copied 01 icrgsd A repository suitable lor holding such a pigitos work could have siaootais 
m«ass;es for ensuring physical intsgrrty and lor verifying acthort«a!on Oetore «ss. 

By arrarsgsig a sjaivorsai protocol, aji kst)ds of repostetes can eoajmafrsssta <ttm oact? oifier m principle i-iowever 

•so creators ot some works -m m-ni to specify lhai ibssr works yffl oray be transferred -o repositories «rhoso ieve; of secar !fy 
is high snosoh- For this -eason, document repositories have a ranking system tor clsssss and leveis of security: The 
security ciassas :r> the cijs'rnntty prefersed eiYiOodtrnent are described m Table 2. 



TABLE 2 



REPOSITORY SECURITY LEVELS 


Level 


Descriptioi? of Seceritv 


0 


Open system, DocLirosnt iransmisssoe is anerisryptao. Nio digital certiltcats.ts roqplred for Idontifscation, 
I n>3 S8ei.i;;;y of She system depends twenty 00 met honesty, ssaeo orsty rnodest knowledge may tts needed 
to circumvent the security sneasures. Tne roposilory has no provisions for preventing ansuttiorizad 
p:op:-an>s iftsm rannsepano ssc-"S55in{jo( ccpyingtiias Tne systani doss not pravem rha asa of raraovaljie 
storage and does not encrypt stereo files, 




Mntrnal secsnty t.ske she prevsoijs class except ihat stored fries are ralnirrialiy encrypted, ineksding ones 
on removable storarTe. 



ISJ^al^iaoTthTiSbfel^^ 



8 



EP 0 715 246 AI 



TABLE 2 (continuse" 





Lev;:-:! 


Description o! Security 


a 


S 


Sassc sserihty. tike ihe previous class except \m\ speciai tools and NnowsssSg© ars requite so 
eompiornise the prograrritrang. ths contents <sA 8ss repository, or ide sia;e d the eiock. Ass dk^tsi; 
eosTimunieatioris are encrypted. A digital crgrtthcasa provsiSed ksefiitatoan Misdium level encryption 
is usso. Repository ttfeniiftcstion number is untorgeafeie. 


;5 


3 


Geoorai security. Uks the previous etes plus ;hs requirement d speciai teoi&ars needed to compTOrrase 
if is physieai Integrity of tee repository and Ite fittest enexypUon is used m aii tfismsrsssions. Password 
profc&ctsor) is f3<pred jo uss ths tocal user inisJaco. The digsiat etocfc system eannoi be reset without 
authorisation. Ho works would be stored on removstbis storage. When executing works as programs, it 
runs Shorn fn their own address space and does not give ihom diieet access io any file storage or other 
memory containing system code or works. Then <m access works only shrougn ths transmission 
nansaciion pioiocoi 




4 


Lite me previous dass except that teveJ encryption is used on ail e«r?ruinicsitions Sensors are 
used to record attempts at physical and eieciionlc tempering. Af-ar such iamparirsg. ma wsositofjf w?if 
net perform other tiansaePons until is has reported such tampering to a designated serves: 


SO 

ss 


5 


Uks the orsvious class except fhai it the pnysica! or dlgifai aiiempts as tampering exceed some preset 
sprsshoids ihai ihreateri shs physical inteorsty of the repository or tha integrity of dio'tei ano cryptoar&pntc 
baineis. ihsnshersposiioryv^sisave orifydocureenidescripiionrseo^ 

soy digital identiusrs that ccsikt os ressissed 8 r^sasssS to an nr> scrape Iocs party li also morfsises any 

i..0ri:::O^re55 Oi at.'inSs ::fOjiy SO il:U!Catt* :na: tpO j.:s p'SICa! SySiSm 3 Ot'^n C.r>rriptO>T!!isyO It cfi^O Otrf:iSS MlO 

eantarris ei dessanaiad Pc<:amso!s 




6 


i.fe this previous cte sxeapt imt the raposiioty wsti siisrepi wl-assss cornmmicaiion to repcsP tssfnpsrsng 
and vffl ernpioy nossy aiarms. 




10 


This wc-Litd correspond so a vary hsgh iavai et socuriiy Ti'sis sesvor waatd nmmiain constat 
o&TmiinicSiticns to r^nots sscisfiiy sysi«as reporisng iisnsastions. sensor readings, and aiiarripts io 
Circnrnvent security 



*i>is characteri^atso:-; ot &ecwity ievefe dsschbed in labie 2 is no; intSiidcd to be twed. Mors impostarn « ;i-;e :dsa 
o! ht:vin9 Gifisrent sscnrsty isvois torciSfsrent repc-siionss. it is aDiiciptiisd tnat nsws««urtty dassas m$ raqriirsmsnts 
will svoivs according to socssii sityauofss and changes in sochnoiogy. 

Rspwifoty Us&r Interim® 

A use* intssfaos is broacSy det:nsd as the rr rechanissTs by which a nsa; intssacis w«h a repository so order so invoke 
transactions to <r*m access to a digsSat work, or mistcm rssags rigtsss As dsscritusc; abovs. a repostiory n-say bs em- 
faodsed in various terms. The ussr intsrtace for a repository wiii dsfisr depending on sne panioufer emsosniehs. The 
user ssTisitaoa may be a graphical nser trsterfaca having icons ;ap;es«a!sr>g the drgitai works and tho varies im ssaciions 
that may rs<s psrfornjsa. The user misriasa tnsy da a pisnsraiad dialog sn whicn a asar ts pfompjao 'or mtorsnt-iian. 

The vm ihtsilacs itseit osso" not bs past o{ tfte repository. As a rspo&riory may bs smbsdWsd in some orher deviso. 
the ess; sntsitaoe may merely bo a pan of the device sn wtifch tne rsposiiojy :& smbsdosd. For sxampie, the repository 
eesjid ba emPec'Psd m a "carp" thai ss inserted into an avatebfe siot in a compt er sy stem TPs ussr interface rosy so 
a combination of a dsspiay. keyboard, cursor oorssroi devics and .software axeosdsng on the competer systsni. 

Ai a rf!in!)rsn;n ; the user sntohaee fnusi permit a tiaer io sage! Infoanation such m aocess requests ana 1 aipfia 
numeric aata and previse fescffjSiOk as tctransaction status. Tbe nsssr iniestacs wiN ®m mm the rsposltory so mm* 
the suitable tfansaefions to serv'sce the request other fsseeis ot a particular user interf ace <m depend on the inncsionaiiiy 
thai a -apossfafy vsr;fi pfovida. 

CREDllilEVERS 

in the present «went»pf; fees may be associated wiift ths exercise of a right. Ths reqi^efneni tor payment ot fees 
is described wi;h each veision of a usage right in the usage hgh-s iangesge The fecofoVsg arid reporting of such fees 
is performed by- the oradil sarvaf. One of the capafoiiities anabiad by associating fees with rights is fha possibis'sfy of 
snpporiing a wide range of charging i-nodeis, Tde slitipSesJ modes, ttsed by convsnlionai eoffvrare, is thai there is a 
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sink's feo m #se time of purchase, srler wnieh mo pw&m&r ©Warns .uniwmsct righss to ess tno wot* as often and for 
as !ong as he or she wants Ammim modei$ : tncitm mststed use ar id vtirsabfe loss. A slngte work can have different 
tees lor «i fie rant uses. Por exanspfe. viewing a photograph on a d-ispiay emus ftsva different tees jhsn making a Hardcopy 
of including sT m a newly crated work, A fey to these alternative charging modeis Is to two a low vmtmsi means 

•5 oi asiabitshlng, fees and accoanimg tor ereoU oo these transactions. 

A credit server is a comptiiationai system that reisanly atHhottees «n<3 records inese transactions so that fees are 
bitted and paid The credit server {sports tees ?o a b(!;:ng clearinghouse. The billing ciaar Inghouse nwiae^ss ins tinaaetal 
umiactfons as Jhesy occur. As a resalt. biits may he generated and accounts reconciled Prefersfciy. the crecist server 
worries store ins fee transactions and oeriodiealty cctfnnwtcat© via a ne-i worst witn the bitag cteahngnouss tor reeorv 

?<5 dilation in such an embodiment, ccfiwurwstibns war? the baling cieaiinghouss woald be erscryptee" for ifiiegrisy and 
securiiy reasons. In another embodiment, the credit server iscts as a "dot;;; card" v^isr® transactions occur :a beab 
tsme* agamsi a -jsor account. 

A credit aerve; !& comprised a! memory, a processing means, a clock, and interface means lor coupling to a re- 
pository and a financial institution fa g. a modem}. The credit server wist also mm to have sscur«y ana authani sea iron 

« tuficsionafiiy. Theso eisments are essentially the same stemsnts as those of s repository. Thus, a single dewce can 
be both a seposstoty and a credit server, provided that It baa the appropriate; processing elements for carrying ant tbs 
corresponding tanchorjs and protocols. Typically, however, a credit server woasd as a card-saad system m the pos- 
session of the owner of tne crap::. The ctssSs. server Is coupled to a fspostiory and would interact via financial trans- 
actions an described beicw interactions with a ilnanclai instite-ion rosy occur via protocols established hy the linarjcltsl 

28 instiiations tnamsaivae. 

in the carirently pfotefrsd s^oooimeni cr&M sorvers associated wah doth trie sssrver and 5h« repository fesor;. the 
tmaiicia! transactors to sh© bfiis'sg elearirjghoyse. for sxanspJe. vsban a digital work » copied by oris iaposstoiy -o another 
sora faa. aredi! ssrvars coapleci saatrsn o; -hs raposstonss repon theiransaciicn So she ailliJigciearinQhoijaa. Thss 
is dsairabie in inns n insures inat « nsnsactson vviii bo eccounsod io; x< ih« oven' oi some bio^k rn the cwnn-iymoation 

^ bsiweefi a credit server and ibs dii«na idearsngrioijsa. iicisiijver. son?e iinpiarner«8tior?s may sasdaciY ori-y a smgiis 
ciSPii server repcrtina. the trisnsacison io rnrnir-ni^s n-ansaciicn processing m. the ass ot losing some transactions. 

aa The present invention uses statements in s high tevei "asage rignts fangeago' to define rights associated witii 

digital works and ibslr parts. Usage rights siitrtcmerits are rntisrptoted by rsposriones ars« are assrJ to detanTiina what 
trancaotio-ris can bo sncc.es skiiiy cssrnedoet lor a digital work and also v>do;ersy!!t"ie p^ratrteters for those ti an sections 
f ot exainpic. senienEtas « me langijago determine Kinetber a grvon digltai weak can bo copied wtsea ano now it can 
bs assd. and what fees lit any) are to na cnargeo Iar mat use. Once ihe usags agate sistsnianis are asnaratsd. tbsy 

;ts are encoded tn a enifabie torm for accessing denng the processing ol irgsnssctions, 

Oalinmg usage rights in teniis ot a language «\ corttbsnaSton wltti trie hie; arch «at lapiaaentailon o! a dsgital work 
enabtes the support ot a svsde vanety ot distfiSation and tes schemes. An example- is tbs anility to aitaen maitipfe 
vetslons ot a ngb? to a work. So a creator may attach a PRINT right to make S copies lor $10.00 and a PRINT fight to 
make unismijea copies fot SiOO.OO A purchase! may then cfsoosa which option bast fits h:s needs. Anofner isxampia 

•so is that rignte tine tses are adostivs. So m ine case oi a composiie wot ic tbs rignts and tees o? ench ot tne oomponenis 
works is used tn dassrmining the nghm and lee® for tbs work as a whois 

The basse contents oi a right ate itia;;;rated it! Figure 14. Referring to Figure 14. a ngbi 1 450 has a transacibna! 
comportent t43t -ano a specifications componem A ngn< him has a iabel t'e g. COPY or mm } «s?ioh inbicatee 
the use or distribution piiviieges that are embodied by the right. The transacsiona! eorapooant 14-51 corresponds to a 
pisriscijlar way in which a dtgiiai work may aa nsed or distriouted The transactional cempeneni: 14S1 is iypscaiiy em- 
bodiioo in software instructions in a repository when iaipieaieni the use or disirlbution pnviteges 'or ;ne rsgnt The 
specifications components 1 4S2 a-'a esed to speciiy conditions which mml be satisfied pnor to she right being exercised 
or to designate Yanoaa transaction reiated pararaatem in tne oijrrenSly pfefen'ed embodii-nent, these epeerrications 
mkm copy count 1453. Fees and Sncantives 14S4, Time 1455, Access and Ssfcwrtty 1456 and Control 1 457. Each 

v<5 ot sheas spacificabons will be described in greafer detail below with respect to the language grammar eternals. 

Tne usage Pgnts iangnage is based on the grernmaf -descfihsd below. A prammar Is a ooavenleni means fcr 
delsnsng valid seqaence ot symsaois for a iangaage. I n dascr ibsng the grainrnar tbs notation Is! b tc t* is tmd to indicate 
dtSiirict cnoices among al-erfifstrves. to this asasaipie. a sentence can have either an *a" *b' or V. irmnst inciude 
exaotly one ol Shorn. Tne braces {j are used to Indicate opiionai items, Note that brackets, bars and Braces are uses 

-s so describe the ianguage of usage tights sentences has do not appear ;n actnai sentences m tar; Sangnsga. 

in contrast, pafentheses are pah of the asags rigbis ianguage Parenihesss are used io groan items together in 
iists. The notation in » used to Indicate a variable tanptb list, im, is; a list containing one or more items ol type x. 
The notation {xf.w used to indicate a variable ntinsaer of issts containing «. 
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Keywords in tft» giwmm are vsords tofiowsd by colons. Keywords are a common and very spsctst case ir> the 
language. Fhey arc ©}S8$> mm so inn-icsta a slngts v&iue, rypieaiiy m «ss«tfe. in many casm : the saywotei and th«> 
psramatsf &m entirely opPonai Whsn a keyword ss given, is oftert tssss & single identifier ss its vsttkie. in some cases, 
tha keyword jakss a isst ot identifiers. 

in the usage rights language, sims ss spaced in an ho«fs:ms>«ie&:s8COfsds for hh mm ssj representation. Tim© 
2003 indicators, e.p. POT for Pacific Dayi'dht T«ft», assy fiiso foe sprite- Oaics are representee; 3$ year/ month/easy 
{or YrVY/MMM/ODr Note thai these time and date representations may specriy moments n time or was of time 
Money «t«ss ars specified mter/fis ot doiiars. 

•FirsaHy. m me usage rights tertOA»$8: various "things" wiii r*8»« to mtaract-viflfft sash other Per example, an inssarscs 
of a usage ngnr may specify a back account, & dlgte! ticket, etc . Such things need to be identified and arc specified 
mtmt using me suffix -•ID* 

The U»gs Sights Grammar ss sstsd sn tfs.srtteety m figure IS and is described below. 

(frsmmr element 1S01 "Dsgttai Work Bights: * (Bights*)* define the dtgstai work nghts as a sst of rights The 
ssi of eg/its aftachco jo a dtp,i;al work oafsis now digitai vsork may fee transferred, used, performed e* played. A 
3<st ot r:ght$ **8 altaeh to the entire digital wesk and in she tass of compound digitai works, each of me components of 
ths digital vvoik. The usage nghts of components of a digiiai rrsty bs different. 

hti.sruinar cHantrs t ; jQ:-; 'Right : * f.Righ;Ccx5e (Copy Cc;unt| (Contra* Spec; {Tim- Spec} {Access -Spec} 
{Fes-Spscj)* enumerates the content of a right.. Each usage right must seecsty" a right cods. Each aght rosy aiso 
opaonaiiy apnesfy £:ondi;k»i& which rrsusl be sslssftsd iiBfcse iha rsghi. cm be «Kaic:sad. Thasn renditions are cofsy 
cewm. cooiro-. tm$. siecsss md tm conctitions m the curs'entiy ersferrsd er«bod:ment. for jhs opiionai stem^ts. !hs 
foi!o*:-!<3 dafnjf-s ngpiy copy coyni eqijais 1. no time iimif on the u&a of -fi\e nght. no nccsss tssis or $ s<5cwhy ievsi 
requasd to uso the npf;i «od no "fee <s roguised. Thsse oondisionsi wtfi e-sch Oe doscribed in greaier dotssi mkm 

11 is important so note Jh&t a dtn,siai work may n;we moslpio verse-!- >s of a npht. oacn having sh« same rsgnt con's. 
Ttia multipie varsion wouid provio'a aitsmaivs conditions and fess far acoes««g tha sfegftai work. 

Gf«?««wt! s-te-i««-r» •5D:i*'Rigm-Cs>dc : » Swder- Ccsde t Tf»n*port>Codc i Pfic-atefisgsroms- Cods! D*a-ivat?ve> 
WsrKs- Crxis Coofiguwrtion-Cotie " dsspngiissfiss each of ffie spacriic fights snioa particafar n$tft ty'pa ;a!!hc-ii<jh each 
nght :s. idssttifisa sy eiisanct nghi cade;-}, in ipsa wfr/ tne gramraar provides- n uaiaiog of oossibis ngpts ihnl ssn bs 
aaaooiaSad wsth par;s of dipstai works, in ths t'diowii^g, isgpia ara divdoP rnSo caiogaisos for convatiloncs In describing 

0::-:: "n«.- cH'W-i VAU "Rendw-CocSe ; « [Play : {Player. i»&y«MD}8PH»i-. {Pri<X«r: PrhX«r4Q\r i-t-Ui ■-. ua;- 
csgojy of rights aii snvoiviop thfj it-akiiig of ephsrnaraS tfisasitrsry or non-rllpitai copios of the Oii|l;i3i work. Afiar use ths 
copies are enassa 

* Ptsy A process ot ;'enOsr ;ng or perion-nsf-p; a Oig-iat work on some procossor This incSsxies such things -as playing 

digital movies, pisyrag dlgltsi mu&ic piaylng a vscfao gai'aa. running 3 eonipuier program, or prspiaylng a 
docis-fion! on a n'ispsay: 

* Print To render ths wc-rk- In a nrsediurtt that is not Hirthsr ptpisdect by asape ngrtls such as printing on paper. 

G:.5rr;:^;:f i5ierr;nn! i £05 "Trsnspoft-Codc :* fCcspy ; Transfer i Losn {R«maioj«g»Rights: Next-Sc-txsf-RighJ*}} 

{fN«sf-C«spy-Bigh58: Nsxt-Sst of ffightsy?" tisf s a catsgcry of righis invoivinq the mmq ot pcrsis-cnt. ucabis copies 
of the dlQiiai work on otner reposaows, l"he options! HexbCopy-RlQhis dererfnins tha rights on the mtk aftar a is 
haaspoftod. If this is «of spsdiisci. then She rights cso !ha trar-trpofioci copy are ths saroo as oa she anginal. Tt-n oprbaal 
Fidmalning-Rlghtis spsclfy tha rights thai remain with a digits* work whan a Is ioaned out. it ibis is not specified, then 
the default Is tha; no ngfifs can be exercised whan if >s loaned out. 

* Copy Make a new copy oi a worfc 

* Transfer Movtnq a work from oae rspoastoiy So arroEher 

* borsa Tarnporariiy -caniap a copy ;o srw^ssr repository for a spaorfierf period ot time. 

$r ts r.rm> -jionw-i! -606 'RitM&si^geiTwnt-Code : - Backup fSac:f<-Up-Cf;py- Rights- Next-Set -of Rights}- 
Rsstors i Osleis i Poicter i Dfrcctcry {tems-Hids-Ucs! f H;rf^««fwteH^ r iS-Hi<ts-i.M«iiHide-Rssf«i>te}- - i^sisa 
category ot tights swsMrt^ opara;sorss for fde raaas^eraaai, such as the rnatong ot nackup copies to protect lbs copy 
owner agaiars! catastrophic equipment tail-irai 

Wany sos'tware iicenses and siso copyright Saw gsvs a copy owner tne rigt^t to make backup copies to protect against 
cafsstropnse tailnra ot equipment Bowwer, tt-e makirsg of urroontsoiiod backup eopsas :s trrrwrentiy at odds wsfb -ha 
ability t» controi iieage. since sin ancoaiiwiiad backup copy can be kept: and than ras-ored avers after tna authorised 
copy was sots. 

The Fsie management ughta snsibie the tmbng ana restorsnp of backup cop-es sn a way that tespaefs usage rights, 
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honoring the reQwiremem* of both trse copy tmm and The rsgnts: grantor and revenue owner. Sssscuo copies ©t wot* 
desenpbons andudinp asape nobis a«d tee 4m\ can be sent arxfer appropriate pretocof snd usage ngnfc eorvtxeJ 'to 
other document repositories o? siiiiseisntiy rwjh security. Further rights petma organization ot difjstss works into tefders 
vshicr. ihsmsafves are beaSsid ns diktat works and whoso con-ems may be "hidden' fsom a party seeking to determine 
•5 the contents of a repostoy. 

» Backup To msfce a backup ecpy.oi a dsoits; work as p;oiect::ori against fnedta iaituse 

* Reuore To restore a backup copy ot a <*g«8l wk. 

* Dsiete To assets or srass s. copy of ss worse 

?<5 * Poider To create and name totdsns : and to move fiies and forders between iokiers. 

* Directory lb hide a ttSei ot hs cmiwvx 

i-<mn-:mar s t.}rfH ? nt 1507 "0et?v8Jiy8-Wofk«'Cc«Je : {Exif3cU£snbedi£«Sft{Proc»s»: ^-oc8bs-!D}| {h&xl-Copy- 
Rigtifs : Nexl-Se»-ot «i^f»5* iists a oatew of rights invoking in® use of a dtpyfai work So create n« works. 

;5 

» Eidrsict To remove « ponton ol a work, lw the puiposss of orssfing a new work, 

* SrrsPsd To ineiude a work m art existing worst. 

* Edit To aUgr a digits worn by copying, seisoling and modifying portions of &n existing digrtas work, 

se Grammar element 1608 Xortfi§uriafc>B.C«sste : * Install i tinimMV iisia a category of rights tor trsstalsma. and 

nninstaiitng software on a repository nypicatiy a rendering reposiionrt This would typieaiiy occur for the instaiiation of 
a new type o; pteysr within the rendering repository 

* mstaii: To install now software ors a repository 

£$ * Unsnsiafi: To remove ousting software }rom a repository: 

Or^mmai {,fcpr,er» i ; i09 "Next-Sel-of-RisM* : - (iAdd-. S*tO!-Ri§m»>} {'Detsse: S*t*af*Rlghts}} {{Replace. 

S»t-©f-.mgfete}f ?(tep: SeK»'?Hghias)r defines hoar rights are casr:sd lommi for a copy o! a digital weak iftJis 
Next-Cosy -Rsgrsts is no; spsci'-sd, sns n<p.is *&r the nax! copy sr<s !n$ same as Snoso o? vm curt«r« copy Oinsrwiso. 
se ihs sal of ngftts for tft<9 nsjfi copy can ba specified vsfstons of rights after Ado':: are added to the ocsteai sei o! rights. 
Sights after DatoU;: ms destei»d from me carrent s«S o! rigfiis if osriy rigp; cocm are isstsd after Ooso?®:. then a!f vsrssons 
of ;)e!iis wnh tisose codes, ase defied Vs;s.:or;s ot rights at?er i-Topiaco- ^osam ait vers»n;.- a\ ng?;rs of the same type 
so the cwrerr; sat ot dohts. 

it nemainrnq-Rigrrts is not specified., men ihs?e are m fights for ih© or-ginai after ait lo;^ copres are kwssd out. 
;?s !• ReiTijjining-f'-ttgiits ss spocit:ad. tpor: the Keep token can bo esod to s-irnijisty the oxorossion of vvn«t r;g?"s to kasp 
behind. A tis! of ssoht csxJss foScwins Hesp niaans tfist ait of 'ha versions of Uioss teed dphto ara mpi «\ the tosTiainsnp 
copy. This speciiicatioo can se overrsdoers dy suijsaausnt Dsfste: or Rcpfscs: epeoifiostions. 

Copy C&mt Spac&mtim 

For various transactions, it may be tissiranle to proves mm finis as to the rtnniPsr of "copies* of the work wPfch 
i?iay Ps exsfcssed simuaarteousiy fos the tight. Fot exampfe, it may fca is'esifBbfa to limit tm mmbat of copies of a digito! 
work that may oe ioaned out m a time or vsswsd at s sime. 

Gi-aiiimar efgment 1510 Xopy-Coraot : « (Copies: poeaive-lntegef 1 0 i unlimited}* provides a conditbn wi'sich 
defines the numbs; of •oopios" of a >«sri< sudisct to she rioh! . A copy txml a»i bo 0, a fixed nurt&er, or cnlirrsitssl The 
copy-count is associated with sash righ;, as opposed to there doing sust a slngic copy-count tor the dfgifat work The 
Copy-Count for a right is decremented each time that a rrgP? is estercissd. Whan the Copy-Count squats 2oro, the ngnt 
Cfin no iongef bs rarsrotsed. if the Copy-Ceont is not specififsd. the defayi; is one 

S5 Cantmt 

Rsghfs and fees depend in generafon rights granted by the creator as weii as fadher rsstrictjon* imposed by fater 
distributors. Contioi spseificatrbns deaf v&b iiitsraciksns Pot ween tf-o eroritors arid S-eir disirfeutom govorrrrng the rm- 
position of further rsstrietiorts and toes. For eeesrrpte. a distrioatof ot s digitai work msy not want an and ©omurnef of 
ss a digifai work to add fees or ©iherwise prd'is by cornmerciaily expioif ing the pUfchaeed digitaf work. 

"(5 rarw38r eiement i St • "Csntrei-Sfsec : a (Contf«l: {Bestrfctsf^e i Unresfrictafete} f Oocfssrtsshte I Ctisrge- 
igfeisj)" provides a condition to specify the effect ot nsags righs and tees of parents on the exercise of the fight, A 
digits] work is fostficfadie if higher ie-vei d-biocksoan impose fanher restrictions (tiirie specifications and aeoess spne- 
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ffwajwsj or; the «gf«. h ss imresfnesabie $ no tether Esstrsosioris ear; os imposes. The cfststei seising ;s ressrsetsbio. 
A sigh! i* urwhas^aabte si no mors tees can ise imposed <& the use of the r^rrt i! ts enacp,esese if mors fees can be 
imposed, fm defoef; m chargeabis. 

ii :s d-en dessrabie So assign a stert tfeJc or specify soma duration as to when a rsgM may be exercised. Grammar 
ai^anl 1512 'Tims-Spsc : - {{Rxed-iotftfval t SJi<*lr>8-ifits?val ; s&stof-Tfctte} Urn* Sxpiratim-Date)'' provides 
for specification of time conditions on the sxercise of a right Rsotsss may be grantsd tor a spselfiec! Sims. CMsrsnt fsncfe 

?<5 of tsm speeiticatloi-is ars appropriass 'or mmm Kinds of rights- Some sights my be exercised dis'iag a iixed and 
prsdeteswineci duration. Some righss may bs exercised for an frsiervsi shs; siahe ins ftrsi time thai she agtsi is invoked 
by s<xm transaction. Some tights msy be assessed or are cftatgecs according to seme lend of metered turn. whseti 
may be split ««e sejjarale intervals. For example, a siohi so vsew a psetwe for an hour mipht ha apili site; sis ien msnine 
vis wigs or foci ffltem minute viewing;?, ot tswertfy three mtwie viewings. 

« The terms 'tims" and "date" are used synonymotfsV i0 fef®' fr> a moment in tlms. TEsere are sevens; Kino's of tims 
spooiiicaslons Each specification fsprssenss soma iirniSabon on toe stsnss ovor which the usage nghs appiles TPs 
Expiration -Oase specifies m& element at which she asaps ripd? jsvss. For sMrrspSe. it she ExpirasioivDaje ss r 
ms," then She fight w at ins first moment of tSS&. it ihs Expiration-DaEe is speeftied as 'toreysr. then ins rlghis 
ate inierpieiab as consinumg without end, ii ooiy an expiiation dafe ta given, than ihs right can be sxorcf&sd as often 

28 as desired umli ihs expiration stete. 

Kmsnrmt element ssia "Fjjssd-fniss'vsl : » From; Start-Tfrne" is used to cssfios a prsdottirminaa iateivsi #m 
rijsis fiorrs ihs slacs t:mo "Eg sha sxp«atiOf3 bass. 

GiarTsmsif s'amsiit UVi4 "SiiiSsng.Siitofvsf : a interval: Use<Dut*tkm* ss used to osiino m mtimimtnstoi for 
"ops-a*; ma ism, \ f sets $m«& on a comin«o«s pwod ot tsms ovw which ffss coiitsnis ars soce&siPio. Tho period ssarfs 

2S on the hrs; accsss aoct sncis alter she biitsbofs ha;> passsacs or ihs .exaltation date is rssohoil wrsjcbayisr essyscs firs;. 
For <5xsmpis. if she nghi aivss tG hoixs of ccnlimsoijis sccsss, Sfio liStS-tiLiraiion wo-rid bsain when inofirss access was 
mads snd snci 10 Siocrs later. 

Gra;v : :;;a: aiar-sani :ct ; 3 "Meter-Tims : » Tima-Rewslnteg.- R«rnslnif!g-Use : ' Is as-sb so dsims & "reefs; i;me " 
snai is. a msasens of ths fiit-e shas She rishs is mmty expressed ii ditfsre from sno Siibing-Snservai specificistion in {hat 

se ihe ams tbatfhe digitai -mm Is in use nssd not bs continuoua. For example, if ths f:gnts guarantee ihrasdays of acceaa. 
those cfeys ccsjkJ Ps spread oss ovsr a aioasb Vim th» spectfeasiors. shs righss can bs exerasso -ratii stsa materttnis 
ss sxhausred or she expsfaliort dasa is rasciieoh whlohavar aoines first 

Remaining-U*s: .= Tims-Unif 
;k Stsri-Time: :== 'ilms-Unit 

Uas-Oassfioi?: ::■ Time-UniS 

AS of the time apscificafioaa ineiebs lirmrufsif spac If leaf ions in their siiimaie Insrarsfiaiion. 

•jc Svewiiy dim md Av&arimtton SpmWmiim 

The pi osasit iwantsct} pi'ovidaa tor vvsssious sscuoiy frtechanwrB so bs iisfroiisjs so' into a dssiridutiof? or ass sehseie. 
O-r-smm.;:: tiftroml 16 »Ae»e»«-%J«o : =({80: Sectsf^-Ciass} {Aufcorfeatfen- A«tnc»»2atien-fD"} {Oiher-A'j- 
thorisa£kmt A«Shorl^ti»rs-fD^ {Ticket; Tfckei-iO|}" provides a rnsans for iesPieisng access arsd irasisreissioa. Ac- 
cs:ss spsoiiwaSions can sparry a rsqosred se*«Esly ciass for » roposiiorv So oxere^s a riptb os a t aqtii-acs auihorsjation 
icsi she; muss be saSisiisd 

Tim keywoid "SC;" is uaso' to specify a rntnimum seansity JavsS tot tf-iS raposrEsises tnvoived 'm ths access, if 'SO: 
' is eof specified, the iowsss eaciir:ty levei is aeeopiebie. 

The opisoiiai i, Asj?hori.i;atic!n; K keyi¥c-id ss to specify required aoiho; saSions on the aaine iepos!t<«y as she 
vC vsofK. The opiiorsai " Other- AisthoFizadom " keyword m asad i:o specify required ijuthorsxalsorss on the asrsef repoeisory 
m she sranssaciion. 

The optional x TSeket;" kaywoi-d apscrEies She ibsiitity of a ssckei requifed for ihs trasi&sesion. Atrasiaacsloo invoking 
bisiiiai Pekefs must iiXisSe an apprcpnase diprtai iScfcat aaent woo urn 'partcsY oi osnefwlse validate ths ttckei Peiote 
SEso iransisrefioe car; proeosd. Ticfesss am descfibocs irs greaier detail Soiow. 

isi a sransBoiios} mveivm^ a raposrio-v and a doeymsnf ssivai. sortsj asaoe ilafiSs may rsqeire thai ths- repository 
have a pafncaSar aiiihorP-ailon. iEiai she server eave some aaihoKi'aiion. or ibai boisi reposiSonee have (posssbiy Off- 
terehi) auawusaaone. Aiiihorfeatsons thsmselvss are digital works (h-srsinaftef rsfsrred to as m mm*mXm obisesj 
ihai 030 Pa moved bss weof; rspoaiiooes m ti'se same manner as oiher digital works. Their copying «od fiarisisriii^g is 
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subject so m same rights arid i@m «*§ othsr digrtsi works. A repository is said to tm$ atitftofitsatsco if that suthon 
ixsfiofi object « centered within ins repository 

In some cases, so authofKaifon may be required from a source other snan the «oc«msr>i server and repository. 
An authorisation ofcjsct fstersncsd by an Authorisation-! D cart contain dlgstai addnsss information to e§ usees to set up 
•s a communications fmfc beswaen a repository arxs the auitfcorissi&ofl source. These are aoaiogoos so s^wis rsyrrfcsrs. 
For stxsh -access tests, the eommorwssttsen wouW nmti to be established artd svfnor&saton obtainec. oefcrs tns-rfgbt. 
coukj bs exercised 

For one-fires usage ngffls.. a vanam on this scheme is to nave a digsiat scW. Aticket ss presented to a dtgitai bekeS 
agent whose type is specified on the ticsst in the ssmpiest csss. 8 certified generic ticks: sg«r>.s. avaiiabie on all 
tc- repositories, is avatiahis so 'punch* the ticks!, in othe r cases. She ticket may eorstasn addressing information tor locating 
a "spssiaf iiokoi agent Ones; a ticket has been punched, it cannot be used again to; the same terni oi transaction 
(unless if is unpuncrted or rsfroshed in ;ne manner described feeiow.) Punching snciudes making Sh© ticket wart a 
hmestamp of she date and :ims it was used, Tickets arc digital works and car; do copied or trans! erred between repos- 
itories according to shear ts$as}§ rights. 
« tn the currentty preferred smbodimsnt. a hpnncheo" ticket becomes ♦uRounchee?" or 'refreshed* when it is copied 
or extracted. The Copy and Extract operations save rim dais and rims as a p;operiy or the dtgitai ticket. When a ticket 
agent is given a ticket, t can simpiy check wheihsi the digiiai copy was made after the fast time thai is was punebed, 
Oi course, the ctigltai trciief must have ins copy or extract usage rights attached thereto. 

The eapiifeikiv so unpunch a hckst is inpohant tn she ioiiowsng cases: 

a; 

* A digitat work's circtnatwJ a? few cost with a trrnitaiion that a can bs used oniy once 

* A digital work is circulated with a ticket te car; be used onee to gsve discounts or? pu;chases oi other works. 

* A digiiai work $ eitoeiafec; with a tickei tincinded in ifat purchase pace arid poesibsy embedded m the wxk} tnat 
can bs iiscci for a futures upgrade. 

ss 

in each of thesa cases, it a p-sid copy is mads ei tne ciipittii wort {including ins asset} she new owns.' woafd sspect 
to gs? a iresh f unpunchsd) ticket whsthsr the copy sesisr hsts used ihe work or no? to contrast, ioansng a work c; Simply 
transterrinp it to atiotfier reposiio; y shonid r;;d. mtekm the isckat. 

-SC i/sa>;Kr F&@$ hli£$?iti¥&£ §p&§if$$iiti&il 

Tne bsiiieo. 'or ese oi a rJigita; work ss fundan>sntas to a cornn^oreiai disrnbyhon system, Qrssroniar Sicrnent lot? 
"Fee-Spec. -{Sshsduieci-Oissoans} Regoiaf-Fe$-Speo ! Scheduied-F«e-Spec i ?*5rkup Spec" r;;ovi:;cs a -; ; rico 
oi options tor biiisnp tor the wss ot dsg:tS:i works, 
rts A key imxum oi mm approach is the dsveiopmonr oi iow-ovsrhsad biiiing tor transactions so possntiaiiy s«»ii 
amonnts. Tt;ns ft oocoaies ieasit;ie to coiiest toss of oniy a few cents each ior ihoasarsos oi rratisactions 

The o.famow dit'terenSiaios between oses where ine charge is per use tfom those wnere it is metered by the tims 
unit. Transactions car? seaport toes ti;at ;iie user pays to; using a digirai work as w<si» as s'scentives paid by the rigitt 
grartiot !o itsoer to ifidrtee them to use or distribute ?he ;3i«fiai worii. 
•so The opiionai scneciuteo discount rsfsrs to the rest of ;nc fee spscitssistion-diseotinf ing it »y a percentage over 

tiros, it if ts not specified, than tners ss no scheduled discosnt. Rsguiar fee specifications arc constant over sims. 
SetiiKtuled toe sperrlileatiot ss civs a schedu is oi riates cvst wbwb the ies speeiiteaitoits chanoe. MatHup specittcaiions 
are ussd so d-bioeks tor adding a percsntags to the tecs aiready being charged. 

Ciiairiifia: iameiv. i 51? *$»hffd«^bfecoam.:« {ScheduJcsJ-Discouot: (Tlnw-Spec Perc^tese'r) 0 A bed- 
iiteo-Diseoertf ss a sssrsonaiiy ts scdeoaied rnsfstier oi any ©met t©e spscit^asson for this vereton o? the egnt r>f -tie 
digiiai work fit does not refer tip cbiictren or parent digiiai works or to other versions ot rights }. it ts a ftst of pasts of 
times and porcentaoas The most recent time in fiio list thai has sot ysf passed at the time o! the transaction is tt;e 
ons in stfeci The psroentane giv®s -he dsscotiaf perceafags for exarnpie. the nrsmbsr 10 refers io a 10% d&eoum. 

Ceaniir:.;;; •«■(«« »R«s§«feif -Fee>0pet : - {tree, i tr;c*f;ttve. j p«t-U»«>Sp«» i ^er«re<i-P5ase->3pe<: l 

;'£i SosS- Price-Speo i Csii-Fcsr-Prke Spec | {Mio- Morssy-Ursit Par: Tfsn*-Spsw}{fV!3n: SiSoney -Unit P>^r: Thvm- Spssc} 
To: Ace-ounMD}* provides for sssveral kinds oi fee speoiticstions. 

Fess Si's paid by the copy-owner/ussr to Sao rs-venoe-ownot if ?w. is specified, incsnttvos are gssd by the revenue- 
owner to ibe tjaer si iscerriivss: is speetfiijd. if the Min: spesiiicatioa is given, ibea •befo is aminimaniteefobeebarged 
per ;img-epsi-c unit for its esse u t:ha Sfer trpecstication is given, then tners is a iTiaxtmem toe to t>e cnafoed per time-- 
sp«c for i!s use Wtien F«e: ts spseiiied : AocouoMO ictentitiss the account to which the too ts to be paid. When to- 
csmtiv«: is speesSie-d. Acco«otdO identities ibe account frwn which ibe fee is lo he paid 

Grammar Siemens • &30 *?&A}s9-$v&<i',a Pw~i}w SSo*w-««$t* oietinss a stmpio fee to bs paid svsry time the 
tight ts exercised, regardisss of now ranch time the transaction tokss. 



14 



EP 0 715 246 A1 



Graromsf elaiTiant 1521 "mmm~fiBt^Bpm : « Msi»r«d; SSfa-sey-UoVj Per: Tims-Spsc" defines a moiered-rsse 
lea pad aeeoidirsg to how long the is ijxerpieed. Tftas : the \t takes to cassis tns ts&fisaefcofi determinee 
tho fee. 

Grammar «&m$r>! 1 2 "Bess-S^ice-Spec : * Best-Pt ic«-. ^onsy-unis. fvlsx: Mocwy-w** is. vses/J 5c> specify a 

•5 best-price fha; is determined mm the account is sethed This specification is fo aeeort tmodaf a specssst dsais, ieaaSea. 
and priclne mat depends on mformsEfeft tttat is no! w&tegito.to the repository: AS! t«8 spsdlte&ticms cm he soniostisti 
with sksfcetss or authorizations mat eouici tootae-that She consutw is a wholesaler or thai he & a pjsfefrsd customer, 
or mat toe sailer be aefhon^sd In soma ssay. The amount <si money m ins 8Js»: ftelcS is tr*rrr«»iiwRjm amount mat ma 
use will cos!. This is ths amount that js isntstweiy debited trorr? the eracssi server Hswsvsr, when she transactor js 

?<5 ussimatsly rsconciisd. any excess amount «sf! be returned so ths consumer in a Sispatats transaction- 

Clhammai oSamam shSo "Csli-Fof-Prictf-Spefi : - Cs;S-Fof-Pr;ce ' : :■; simile; Sea "Btsat-Pfics-Spec" in iha: it is 
sntsndecto accommcdgite eases whsr® prices am <tynamsc. A Cafl-Por-Prtes Spec requires a communiGStion with a 
deafer to deie-raine the ence. This option cannot fee exercissid ;t ibe teposltory cartnoi communicate with a dealer 3!. 
id* time mi ths right is exercised l; ss basao on a secure iransactton whereoy ths oeeiat- names a ansa Jo exereiss 

« she rsgnt sod passes along a dea: csrucmo when is ratemncsd or inched tr> the b&g process, 

i-<ran:mar £=j«?r>«=fu i52M ■*Sohsd«ied-Fe«-Sipec: - {Oebeciate; {Time-Spec R»gu!af-Pee-%>as}T :& uss=5 to pro- 
vide a sehedeie o- dates ovor which she iae epacifeafofis onaepa. The ?as epacSscessori wm 1he reeani d;sie net 
In jns tviiyre is ins one thai is m $8ssi This is si^iiar to but mors general 5h&o ths scnadslaci discoimt. it :;s mors 
geoetal hiscauea S ps'ovidas a means So VBty ths fee agiaeinar« fo; aas;h nms poaod. 

28 ar»rorMf siemons 1&25 "yafikop-Spssc: « S^tKup; p^sfesma^s To: Aec«unS-SD" is proviosd for adOifi^ a per- 
caasaosi to she Sae« aimady i>eing chsfgsd. For sxampis, a S% markup •risana shas a See of 6% of cumulsiivs tsa so 
far wils da aMocaiecl So she clisirvbutof. A aisrkap spaoificiaisori car? be appi:ad s>a8 vt She mm feeds ot tee spscificatsoos. 
i; is ;ypies!Sy used io a shaii provsdsci by a Oisiribeior if ratera io teas aa;K>eie:ao wish oMsioote tt^t am parts ina 
c-mmi ci-biock. Ths migi-n a cofweiiiant speciheasion Sor use in xtm®. or tn distr-bator ovsrhsaci. 

ss 

REPOSITOHyTBANSACTiaNS 

Vvhar; a user reqwee-s aecess to a digital wwk. »)s feposiiory v»B iniiiasa varieos ieis'saaeisorie. The- cored inaiioo 
of traesaaticos ia^oisao %iil dspaed 00 tha spaaitfcaiirxis assfanao for a a saga right. Tsets ans shr sa dasio types ot 

-S>? iransfictioas. Session fnitieison 't'esnsacitoris. Financial Transactions, and Usage Traniaciioas. Geeafali;,'. s-ssssor; im- 
tsaiion sraosac!te« are initiates' first to establish a vaiio session yVhae a vaiid sessiOis ss esiaaissheii, tiaes-ictions 
corresponding to the varsoss esa^e rights are invoked. Finaiiy. reqessi specie s-ansactions are psrfonTiaa. 

Tnaf tseeifoos occur bemeeij Jwo ropcKitories fofte aetiag ae a server}, asiwsar; a reposrie-y atirf a doeuraersi piey- 
bacts piatfarm ie.9 tor esseatine, or Viewing), batmen a repdssiory and a oraoit sssver or bsiwsan a mpositcfy and an 

; ? T aethorssrttofi server, Wnsa ifaasactroes occur between nxJie thari one repository, is is assumed thai shore is a reiiaeia 
eonirnanicatsan ehaeitei Oeiweef? fi'te f'apasrteises For exempts, shiscc-aid bs a TCP/iP coanosi a aey ofher eofnrriea 
oiaiiy availabio shannei that haa bU'ti-in capahitiirss for detsating and correcting transmission errors. However, si ss not 
assumed that She eoinrnunieadon ehaenei is ascui®. Prowsww tot secunly a»d privacy aia pan of the raquireiaesjSs 
lor spesrh/ioa. ai«3 irapieeteoSiftp ropc«i;ories and thus tears tee isead Sot vatious Snsf-Sijetterss. 

iV?essa«<s Traiwtifs&fon 

Transactions require thai there be soma conwrtuntcatioft betwsan repositories. Conirneoisatiors beiwoen reposi- 
toises csx«rs in units terrnod as messagss Baeauso the eorrifnueloafiori ii;5e la assumed io be ef?seouie, afi cortois- 

*s oieaiions » rapositoties that ara above fhe iowosf seaefify eiass are enerypfed utilising a pishlk: key encrypSiori 
techniqiie Pudllc key encryption ■& a wsli known isehnipae in the sncfyptfoo arss The term ftey raters to a numeric 
code that ss us*d With eaeiypiloii and dee-ypsion afgosithrtis. Keys come in pairs, whore 'wtimg keys'' are used to 
encrypt daia and 'checking feeds' are ttseci to dsciypt data Both writing ana ehackina keys may be pebtio of privaf®. 
Public ivsye are ftsosa ihat arc distriby-ted toofhe-^. Private keys are maintained in confidence. 

vC Key raena peewit and secarriy is Instfarasnta! in She sijacass at a pebiic key encryption system, in f«e cuirenfly 

prsisriso' ernbodiman;. one or rnore masssr rspositones maintain the iasys and cresrts tns Identification cshifieafes 
used by She repositories. 

When a siisndinp fapository transmits a massage so 3 receiving repository, the sending fapository encrypts aii el 
its data ussng the pebiic writing key of the receiving repositoiy 'ibe sersding repository i no iudss its name. the name ot 
she foceiviftg roposito?y : a session idortiilier sech as a nonce {described ttekm), and a messaea <towm In each mes- 
sage 

in this way; the commtinication can oniy pe rsao (to« hl^h pi'osabiiity} by the mcaivinp repository wbloh holds 'the 
private checking key tot decryption. Tite.an»:sary data se nssed So guard atjSinc! various replay atiacke So secutlly If 



IS 



EP 0 715 246 A1 



rnessages sw mm with the wrong counter or an efcs nones, me repositories can assasTie thai sosTieone is irviertsring 
wish eofsmumesto and the transaction iett?ynsied. 

The respective pubis:- keys for the repositories to be used for encryption are ootsiogd trt me registration transaction 
described besovti 

a 

trrf<raS"Wf rfa,j«5;!U.J,ft?f>i* 

A usage transaction is carted out « a session beto/een repositories. Per usage iransmions ir-voivtrtg more man 
one repository, or tor ttrtanctst transactions between & repository and a cr sd-i server, a registration transaction is par- 
ts termed. A sessorid transaction termed 3 soojo transaction, may aiso be needed to inlsiats she session. The goaf of the 
regis-tailon transaction Is so establish a secure sttaneei bniweso iwo repositor las who know each othsss scteolSfces. As 
it is asswmeo the; the eommenie;rhon ehannef between the repositories fe refeafefe out not secure., there is a nsb that 
a non-rgposrtary rrray roimso 5t?e piotocoi in order yam iSeg&imate access to a repository 

The registration transaction bsiweeo two repositories ts oessrthed wftft -especi to Figures 1 8 and t?. Tfio steps 
« described are from the perspective ot a "repositofy-r registering ;;& identity with a "repository's'. The registration must 
be fryrnmetrtcd so lh« same set of stops will be repeated for repository-^ registering sta identity wish repos.toty-1 . 
Reietnng So F:guf© 16. repository-l first gsrtsmtes m encrypted registration ioentittsi. step iSfjt and then generates 
a registration me&sage. step 1602. A registration message is comprised of &n identifier of a master repository, 'be 
idsnhhesSlon cehifeete for the repository- 1 and an encrypted random registration idsatiflas: TPs identification certificate 
is encrypted by sne master repository in its prwata key and attesfe to She Sacs thai the repository ptxn repository -i ) is 
a bans; fids repository. The identification certificate aiso contains a public key far iha repository the repository secanty 
level and a trmesiamp ;indica!ing a iinie after wnich the csrt^icste is no iong-si valid.; The ragjstiatwi; dentrrin; ts a 
mtttmt gensrateo by me reposSojy Jot tdis fagistrabor; The fegisiralion iden-iiiar is un^ue !o ?hs sessiors and is 
anuypiso' reposiiory-Vs prwate kay. Ths nsgisirsi-ion sfentHiSf * i;sed ; o improve saourUy oi iseihenbeabon by oV 
tso-jng certetn hirxJs o? exwsrrsufiksstKSfB based abisoks. FteposjionM shesn iransmtts she tsgJsUatKS!? message so repos- 
itory^, step tsos. 

Upon recaiving The s-egistraiion message. raposi50fy-2 dsierri^nas if i! bas tbs naedad pubiie key lor me sassier 
repository stijp f 604. if -apos:toiy-2 does an: bava iba needed pabi:o key to decrypt she identification eeniteate. tJss 
fsgisbat-cn tr&nsacfion ioffainasss in an error, step 

s>? Ae^unimp -hat repos«ory-2 hm the propsr pubiic key tba idsint^cetian csit:f««is « daorypied. step ?805 Repos- 
it:o;y-2 s<-vas shss sonryp-i^ registraiion spentibes: stap ">80B ; and Mnxia the repositrsry sseofitief. step tS07. The 
extractoa reposiiory iseniiber is chsoked agslnst & "hoiiisP' of cosTtprornijed document rspositcrisc. step 1508 In ths 
csjrrantty prefetred emboetmen!, each repositoiy contain "notiisa;" d cor^torfiised ;apos:iorias. if tfva rapnsi-ory 
ss on ihs "bofiist', %h$ registfation f ransaciion term-nates sn m orror pa; step >SiS. Reposttonss san no removed iron-; 

;rs the botilat when tbaireertstieaiss expire, so that tns iist does not nasd to grow wstbont bound. Aiso. by keeping a short 
iist of hotiisi nersifinsites thai ;t bas prsviosjsiy tmwo&, a repository -can avotci ihs work of aciuaily going through she 
iisf. Thesa iists wousd be encryptact by a master rapository A mmor variation on the approach to improva sffiaiancy 
wouid have the repositories insi exohange iists ot names of hotiisi ceriibcatos. iiiilmataiy exchsngisig eniy thoas iisis 
inai -hey had not previously reseivep. The "Potbsts" saa nsaiaiained anri aistiiauteo" by Masse? repositories. 

•so f^ots ihat ratbar -nan sarmlna-inp sn error. Sba transaction couio request mat anoibOf rogisSrasion massage be sent 

based on an identification eertiiie&sa created by artother raasfat repository. This may be repeated nnbt a satisfactory 
identification eenifoaie is toand. or It fs determined thai tnjst nannoi be esiabiisbed. 

Asijcming that the repository is not on the hoiirs;. the repository Identifier-ton ncaoe to be verified in other words, 
repository- 2 needs to validate that the repository or? the other end » realty ;epositoiy--1 . This is terraeo 1 perfomiance 

■*a ;asttng anP ts performed tn oroerto avoid mvaW access so me repository v« s coijniarte;; repository 'ap-aying a re- 
cordlegof a prior session initiation oot^een repoei-on/-'i and reposifory-g. Pe booms-sea tesbnp Is initiated by repositOiy- 
2 gerierating a performance massage, step 1609. The perforriiaace rrjessage oaasists o! a nonce : the -lames of tt-a 
ffispectwe rspositrsfiee. tba iitne snd fhe rsgtsif;5ttofi identifier received tram rfjposlmry.i. A nonce is a genemseci 
fnessage based on so-ns r«fs3css and vanabie Intormatlon {e.g. the time or the temperate.) The fiance ;s used to 

se check whether repository-- 1 can acSijatty exhibit nosreet encrypting of a message using the prices e keys Is aiairns to 
bavs. on a -message that It has never seen before.. The pebormaoea message is encrypted using the public key specified 
sn fhs (egistratio-i message ot rsposiiory-t , The perta-mancs niaeeage ;s transmitted to repostiety-i , step 1 81 0, wlwe 
it ts decrypied by repository-" usiiig tis prrvrste key step 1B11 . Reposritory- 1 then shacks to make ssre thai the -names 
of the two repositories are correct, step 101 2. that tee ttms ts aecerem. step 1613 end teat the registration tdenrtsier 
certesponds to tt;e one rt ssnt. sisp )St4- it any of ttices tests fasts: ihs transaction ;s iemtmted per step 181-6. 
Assarting that, fhs test s are passed, repository- 1 iransmits tea nonce to r apositor y-2 tn the eiaer. step 1 S ; 5. Rsposftory- 
£ trrsh compares the received nonce to me onginai nonoe; step r6i ? ft they am not Idenf less . the registraiion transaction 
terminates ;n an error par step 1818. if they ars ihs same, the registration transaction has saecessfoiiy completed 
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At mis posnt. assereing tnst the transaction has not Terminated, the repositories exebangs messages containing 
session keys So fe» used m sitf eorariunicaftery; Sitting the sassiotr and synohronoe ih&it clocks. Figure 1 ? sltesttaies 
ihs session information exchsn$e and ciccs synchronisation steps tsgssri tram in© perspective of repository-; ) R«- 
tsrriug. so Figure 17. repository- 1 creates a session key pasr. step 570!, A iam key ss kepi pwass and & u&ed by 
•5 sepossiery-d to encrypt rtsssisagss. The second key is s pubic He-y used by rspository-S So decrypt messages. The 
socorxi sey is encrypted ■■.mag toe pub:*; key of repository -2. step 1702 and is son! to repository step 1703. Upon 
receipt. reposstory-2 decrypts the second key step 1704, Tiie secortb key is uasti to deeryps messages in subsequent 
ctawmmBaJions. When eaeo repository nm comptoted {his step, fhsy are both convinced that the other repository « 
bona tide and mat they are @ommuei<eattR§ with the ougtnai. Each repository nas given the other a key so oe used «j 
?e decrypting further communicsiioos durtrtg the session. Ssnoe seat key is issetf sraswmttso' m the pobSc key of the re- 
ceiving repository only « wait be abb to decrypt tee key which is used to sSecrypt subsequent rnessapes 

After ibe session srrorrmticn fs exchanged, the repositories must synchronize atetr clocks. Cieci« syeepronszation 
ss used by She rsposisortes io establish an agreed upon time bass for me ttnancsai records of Jhsit tnwwi transactions, 
scoter ring Pack to Ra,t»ret7, repository-;;' jnif iaies clock synchronisation by peueraiirsg a tsms stamp exchange messspe 
« step 1705. ana bansmiie r io secosifory-i step 1 706. Upors receipt. <ecository-l gene-rases its ov*rt linie B&mp mes- 
sage, step t?0? and transmits * back So roposiSory-S; stop 1 70S. Repository-^ notes the cut f mi time, sSep t?0& and 
stores the tiros receiver; tr«T: repository- S , step 1710. The current turn ss compared to the itme roceivsii from repository- 
3 . stsp 1711 The OiiSsrersco s thoti crsockeo to see it ii exceeds a prsdstsrmfned toi««atic« (s.g. one mmuisi. step 
1 712. ff st ctoos. ropostoy-2 iertrssnaies tbs-tfansscisori as this srtay inci*c«-e tampemg wuh U)« repesirory step 1 713. 
28 ii n« r&pos(Soiy-2 computes aoadpjstsdtweo^iia, step t7s4. The »d|«st«d tims «8fca (s tm Q&mm 
clock trms os rspo&itc5ry-2 and the average os the times from fepossofy-t and :nsposiicry-2. 

To achieve grctiSer aoc-yrasy, r onositosy-v: can requesi jhs lim® again np -o a tacsd numbs; of t;mes {s: q hvo times), 
repass me acwk synersrorsKaSson steps. ars<3 average ihe rossjirs. 

A second sess ion i n :t :ai ^on t ransacs >on is % Log in v. an s&c S ion 'iivilcqinifansiiiCliorvsusedioehecktiieacihenaciiy 
ct a user raqnessin;;; a transeciion. A Looin ;;anaact!c<n m part:cn!ari¥ pruciisrvS i'or She Sioihorwaissn erf Riwtcis! tnsnses;- 
trons iPat m ss ctsarpen !o a crsdst server. The Login iransaeSrcn tnveives an inreraetion between !he user at a trssr 
sni«nscs and xhs credis servsr associated wsih a reposkory The lotos mas ios-i exohahgsd h ere ra a iogsn erring suppited 
by She feposi-ory/ci'cdii sesves so sienttfy kseit to the amt. and a Personal idernilie;iiitt;5 htureber fPthi} provided by the 
aser to ideniiiy n:rnss!i So the cretiii server: in the event ?}>?:! tnc user :« aeoessing s creast server on ?• reposiiory diiiersnt 
s>? <.fo(n the one on which tha ussr rnienacs.- (0&:dss exchanne oi she mionnatior: would be encivpiocf using ths pebiie and 
private hsys oi the respective mposifcnes. 

Bliiing TransacttOiis arc concerned with monetary ifrsosactions with a credit server Siiiing 'f raosacslone are earned 
out when ati older eondislons are sasisiied and a usage fee fs repulsed for gsansing the rsqusss. For the rrwst parr biisng 
Irans&cstons are w\\ rsndersiood in 'he slate or ibe art These ifansacho-rss are Between a repository ann a crepit server, 
or bsswean r* credit ssrver and a biiisng oieafin«r;osjss. 3r;efiy. the sepsjired transacslone inoluds Ihs ioilowtuq: 

•sc ♦ Registration and LOGIN Ss'ansaeSions by «iiteb the repository and user ostafoitsh tnetr eona fsdes io a credit server: 
These S;ansackc«s would bs eni»eiy :niOir:ai in eases A'tsers ihc teposiiory and essdi! sssver sra imciemssiied as 
a singts sysfesn 

* RCQiStratscn and LOG ihi transde?lor:e. by vshtch a cedsi sewer csiabiiShcs «s borsa tides so a billing clearinghouse 

* An As-sio/Hes transaction to assiqn a oharqe. The kriormaslon in this transaction wouid snciude a transection iden- 
■ra istser the identities ot the repositosies in the irsnsacSion axi a tsst oi chsrrges trom ibe patis of the digiUi! vw>«.. 3 

there has Psen any unusual event m the transaction such as an irtterrupttort of comnsunicatioos. thas snforaiaiion 
is included as vssii. 

* A Scgin-charges traosaetion ;o fission a charge. Tttts tmnsaeiion is mm the sarnc ss an assign-tee transaction 
except thas * is used tor metei^d use. it includes tsse saws reformation siiS she 3ss:gn4«8 transactors as wolf as 

vC !he usage tee iofcrmin'soB. Tne c redif-sesvor is then reepofisibie for running a stock. 

* An Ersd-charpes transaction to end a charge for metered use. fin a variation on shss approach, the repositories 
sonic exchange periodic charge iniornrBtioo to; eaen dicsk of wm.) 

* A rspofJrcbiKges irr-esacfion netweesi a persorrai csedif server r-rsd a oiiiiing cieartngfiouss. Toss transaction ss 
mvoned ai feast- ones psr piiiing period, is ss es&d to psss atong intormsfion aoorjs charges. On debit and credst 

sa caras. ihis transactor wouki aiso be nsed io spdate bafanca intorn-atior; and credit im isis as sieeded. 

Ail fettling srstnsactions are gsvm « transscuon iD ssnd are rspo-rsod so tha erects severs by both sshe sssrver and fbs 
client, f hss reduces poss-hie ic-ss of osibng snlonnsitson a one of see parties to a tiar-sactiosr loses s banking card arid 
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provides a cheek against tampaessg with the system. 
limga Transactions 

•s After ttss session s'sstiasson transactions have bom completed, the usags roqsass may then fee processed. To sim- 

pitty she description of m* sieps cawed otH *i process^?} a usage- reqysss.. tfts term rasp.sQS1«f ;s used t» nsfar so a 
repository m the reqsestei mode which >s arffiiaisrtg a request, arsd the seat? -server is usad so rater to a i^posstory srs the 
server mode and mxfo contains tha desired digital wars. In rrsarsy sas«s sswch as requesfs to prais ot vtew a work. »h« 
requesiei and server fray e-s iihe same dovice and the sransactions described in the toiiowteq; vveuia be entirety internal 
?e in such instances, certain transaction steps, such as the registration transaction, nesd not he prafowos. 

There are some- cortsrriots slaps te arc past of the «exnantiG8 of ail ot the usage ngh!s transaolions. These maps 
are referred so ss she commit tr&nsacttcn steps. There «r» two sets -she "opening" steps and me v c:lossug" steps. For 
strrspiichy. these are itsttsd hsre rather than rspealmg ihem <r* the descriptions of ail ot toe usage nghSs tsanaacs'sons, 

Tr&osaetroos can rater to a par; e* a ai$M w a. compters- digital work, or a Osgsai w&rlt containing oths-r digital 
« wofK& Although not described sn deta'S ne?s>itv a transaction rn&y even refer to a folder comprised oi * plurality ot digital 
vsorks. The ism; "work* » sisadto rsfer so what ever portion or sei of dsgrtsl vj-orks is belrsg accessed. 

Many of the steps hare mvoiva oetermwarfg * certain concisions am satis-led. Ffeeail ifm each rssage ngns may 
have owe or more conc'sssofss which mug; fos satistserf bsfors tsis aght can bo exorcised Digsia: works i^avs paris arts" 
parts have paria. DiSferaRt pasta can tsavedifereol «^t» and sices Thus, it isfiecsssary iovesiiy s'i'sa; she r^qsjsrswerHS 
ars mot for ALL of thss pasts that as o (nvoivoc; m a tfansaeSiors For brayisy. wrssa • oieranoo ss rrsso'e so ohaoksna wnoihar 
she rights «x<st and conc^em to; e)ssic*stig ass sas^ssed it » mean' ttet as; chsckisig Sake& piaee for oash ot ths 
reiavarss pasts d the wotk. 

Fsqufo 18 sliasf «j)0s s.fsoii'sitialooj'arrionopcfsssigasicicSosjsrsgss.isps fcsr a ssssiasaotico. As this posrtt « is-assum^csinat 
;egisi;«!io:- : pas. oioerred and Shai a v iR;iis<3" se&yoa ;& in psaoo Goas;as soste are teess on usago nghis associataci 
vs';th itsa soidor crsnsasriii^otho work cs soroa coriiamsrig loicier htgPsr & syaiesTi r-iararchy TPesa iasSs oorraapoi'sd 
to requifSsTients imposed or? the worss as a ooassqasnoa of its oeing oo she paacsjiar rapository; as opposed to bssncj 
attached to the work hsssf. Referririg to Fsgum IB. prior to initiating a ysags smnsactson. tf.o roquosassf performs my 
gsnmsi tcsss; it-at ar« rsqusrsd hasoro tha righs assocsased wkh ttsa tiarsaactior; cari bs axaicssed. step, 1801 . For sx- 
imp®, msiaii. urtm^tt and delete rights may be sa^piemaosoa so require thai a requester have an aasboraahori oerS;? - 

so <C3te< Solon; tiio can 'm exercised .Another e^ampSo is she raqjif srnani that a dsqi;a; trtkst be psesent arsd punched 
besoro a dsgisai srak may ha copisd to a rsquastet. \i any os m i^aai tast« sail she SrasssacS-rssi :s cot trsiLased. step, 
1 &02 A;;a;aY!ing tha- soch required tesss aro passed, upon receiving ;he usagf? rsiqussi. the server gencrasos a i:ar;s- 
aosiof; sdcfsSstief tha! k sised «i reccsds or raporSsoi She trasisacdosv ssfsp rSOS Tha sasvsf thasi checks iisneiher sbc 
Pigiiai work has Psen graoied sha righ! oofj'aspoacing so m rooisostad transaossoa. step 1804 if the o'iciiiai wosk has 

;ss not been granted the ngh! corresponding so the reqyeat. she transactsoi's lermsnaios. ssop S80S. If she digstat work has 
Pees? gissfssed trio ;eqnesSe;3 sigh;, the server Vim determines if sbc vassorsa condVtxms sor exescismg ss?e rigiss arc 
satistisd. jsne based condissocs are examined, step 1S06, Those conditions sre chooked ey eKasriiaing the time spec- 
itication ios ;iie Stio veraion of tS;o i :gh; if ar;y oi ihe condittons arc not sasistied. it;e traiisecsion tenr«riaisc am step 1 805 
Assca^ng thai tse sss^c bmm conditions ase sattshcit she server checks aoaersy %m access ccrsbrttcsss. step 

•so 1807. Such soorif siy aad access conditions are sasssboa it 1 > the requester & st )Pe spooshed secursSy oiass. or a higher 
seconsy ciass 2) She server satisbes any specified as-itho;uasion test »nd 3} She rsqussi«f saiisfies any speeded ae- 
thotixaiiors sesta and has any repaired dis^iSaitrckess. if arsy of the corsdiisona ase r;oi saiiafisssl Sisa iraswaction tcmssriaiea 
per step 1805. 

Assuming that sbc secsjrrty aad accsss conditions are ait satisfied ;he server checks tise copy count cono'rtfO!;, 
ssep :S08. ii trifs copy ssouas oqiiiiis ?aro ; tssen me tssiaaactioa oamsot he sorapieted and tha sransaciio-^ tsrrmriales per 
step 180?i 

Assummg tlsat She copy count doos rsoi squa! zero, the server checks if the copies in ese fortfts reqeosted ngt;t 
is prasstas than or aquai to any copy sours! far tha rsquassed ngh; (or fsievarss parts step 1809. itths copses in nm is 
greater than or aqriai to the copy coent. this mtss^m that esaga rsgi?ts for ihe version o! the iiansactich have bseo 
se exhausted. Accordiripiy. ths server tarmsnaSes she iransactson. sisp t£0&. it Sba oopy souoS is iass thrsn the copies in 
use for she transaction ts-s trsnsactron can coritsaue. aeci the copses m asss wotsid bs sacrsa.oatsd »y the nt;mrw ot 
dspitai works requested sn the transaction, siap 181Q. 

The servsrttjen cheeks if this digriai sjvork has'sa-'Losio* bcgsss nipi. step rStt . Tire "Loan" access ugh! is aspaoia! 
ctsse sirsco reiTiatninq rrghss may be presant syon sboygh alt copses are ioacsd oas is tha Oigita; iwk has the "il.oan" 
access ngisi. a aback is reads !o see sf all copses fsave beers scarfed out. step 1812. The number of copies that couki 
be loaned ss ths sum of tha Gopy- Coatits for ati of the versions of She loaa right o! the dlglsai work. For a composite 
work, the relsvam figsa'e ts tha miwmaj stich sam of each ot the components of the composite work, if ail copies have 
Peso ioanad out She rsrrrainloe, rights arssdeteirnitseo, stap 1 81 3 The rernatriinp-rigbis isdeiermsnsd i;on^ the rarnaihiag 
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rights specifications from the versions of the Lean tf&n, It them « ©nt? ons version of the Loan right, ttssn sn« deter • 
mrnation ss simpie. The retraining rights ars -ha ones specified m that version of she loan nght. or rw<e it Remaking- 
Rtghts: is not specified. 8 shera sr® srsuitfpsc versions o* m Loan right and ail capias ot 38 ot ins versions sr® loaned 
out. then the remaining nghts is taken as the minimum set hniei^setion ,s of remaining rights across ait of ihe versions 
* oi -me loan right. The server then determines if the requested right sss in tne set c; remaining rights, step 1S14. if the 
requestec; right ss aos in me set of remaining tights. the server terminates 1:he transaction, step 1805. 

it Loss's is ool a usage fight lor the digital work or if aii copies navs not been ioaoed out a; the requested sighs is in 
we set of remaining rights, fee conditions for the rtghf are men chscKed, step This wilt miste vaneaetKianetas 
transactions between She repository ano associated credit server Further, any metsrmp, Gt usage ot a ciigiiai warfc %»ii 
?c commence, ii any fViancnaf itmt&cvm iaife, the transaction terrninatss per step 1805. 

It should be noted -hat She aster in which the conditions ats cheeked need not follow the order o? steps tS08-?Sl 6. 

At this pornf. hgh; specific siepe. m& now pmmma and ere represented here as step f 818 The oght specific 
stsps are described in greater detail heio*: 

The cornrnon closing transaction steps ere now psriorsTiod Esen o? the closing transaction steps are per formed 
« by the server after a ssocessftJi complete or a transaction. Reternno, back to Rgere fS. the copies so use value tor 
the requested right is decfsrnsntsd tiy the number d espies involved « she rs'sr;saetion : siep 101 7, tel. if the right 
dad a metered usage ies specification, ihe server subtracts the oiapsebtirne from the Hemalntnq4.;se-Tfins associated 
with the right for every part invpivsd in ihs Sransaetioii. stop 1S18. Fsnaiiy; it thorn are toe speciiicaiiens associated 
vssth the iighi. the sesver Mm® SnO-Oi^fge financial f ransasiion to eooitrrn bsij^ stsp 1819. 

a; 

"SYansseuss toft protocof 

M irnpoitsnt area to consider is the transmission of tde Sigiiai work iron! the ssrver to ;hs r«q««ster. Tiie irans- 
Mission protocol described horsin tsfsns to events occurring after a vaiid session has been created. The tmnstnissson 
pretsi:oi most hanciis the ease ot disrupiioj's if} the oommunicaDam tseiwegn the rsfsosrirsnes. if <& aoeerrieg ths! ifJtef- 
serene® seen as iojsctmg nosse on ;ne commyoicatsoo ehannoi can be esieciec by the integriiy cheeks -e g.. parity, 
cheokssn^. etc } that are buih smo fhs transport prctocot and are not dsscassed « detaii herein. 

The nsidertwng geat in the transmission prorocoi is to preciude certain taifn; e srioPes, such as inaiisions or asoider;;ai 
ioferieroncs on :ne cornms;nicanens ohaonst. Suppose, for exarrtpie. inat a eser pnits a earP with the credit, servsr at 
se a specitic time near tne end of a transaction. There shou id not be a vuiherebie time at which "puffins; the card" causes 
this rspositones to {»» to octrectK' iseeoiavi for the rsumbet ot sopsee oi me work fhas have oeen ererst:®;}. Restateo. there 
shonid be no time at wrhsch a party can break a connection as e means to avoid paymsni after yssng a digitai work.. 

f! a transaction ss :nierfypi;sP {ana faiie): both feposiiorrss rssiore she digri:ai works and accounts rotfieir stare prior 
to in® iaiiyre. moPeio records of the faiiare ttssii. 

Fsgnre 19 is a stats diagram showing steps in the process of transmitting informeiion during a transaction. Each 
box represents a stare of a repostoy sn eater the ssiver mods fabovs she centra! dotted tine 1 9bl ) or in the requestor 
mods i&etew the dotied line 1 501 5 Soiidaoows stand tor f ransitions cstvvesn states Dashep arrows siand tor message 
cor!-i»Tssrs!catioi5S befvsesr^ the rsposrto;:es. A dashed message arrow pointing to a soisd trar;s;i;ion ar row ss mtersrstsd 
as rnear^sng that, the transition takes piace mm ttre message is receivsq. tlntaeetsif iiarisition arrows tase ptocs 
•so ynoondiiionaiiy Other iabeis on stats transition arrows desenfoe conditions -net trigger the transition. 

Referring no**r ro Figure la. the server ss initial in a state 1902 where a new ti-ansaciioo is initiated via start 
message 1§03 This message ifioindss transaoison infonfiahor; incissfsng a transaction identiiier and a count of she 
blocks ei data to be transferred The requester, irrisiaiiy « a wait slate <g04 then enters a da:a wast state i905. 

The serve; enters a data Parssmrt stats 1&08 and fraiismits a biock of data 1807 and then enters a wait to; 
snewiedgemeni s!atf: 1 90S. As the data re received, the requester enters 3 data renews stats 1 909 end wnerr rhe di3ta 
btocKS are ecrnpieteiy received ii enters an acknowledgement srate 1 5 f 0 ano transmits an Aekncwiedgement msssags 
191 1 ro the server. 

is there rrrs more btocrte to send, the server warts anfii racosving an AcknowiedeemenS message from the requesier 
When m Aeknowiedgsi^ert; essssage is rsceived it sends the next biock to the requester and again warts for «ckno>#h 
5® edgerneni. The ropurrsfer aiso repeats ihe oareo cycte of states. 

is the server detects a coremenieaiions taiiurs eesbrs sending the iasS feiook. it enters e canesiiation elate "StS 
wherein the irarssaetiori ss caneeiied. SirrKiariy if the requester detects a eomn'tunicsiifons faiiers before rscsfving the 
last biock enters 3 cancelation sbste- 1 Si 3. 

is tnere are no mere pioctus >o send, the server cornn-iits to the rransacSion and waits tor the ffnai Ackoowiedpernent 
sn state 1S14.it tnere s a eornrriusiioatiorjs taiiurs betors she server recurves the final Actaosiodgernsfi! rnessage : it 
stiii commits to ihs transection but inoiijdesrs reporr about, the even- so its nredit server in state 1 915. This report serves 
Vm purposes, tt wifi netp Je^iSmtxe any ciai-^s ey a user ot having been Sxtteef for escsiving digita; vwte that were not 
ccmpietely s^ceived. Aiso it helps to identity repositories and eomn-ynicaiions irnes that have suspicious patterns of 
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use w6 sasfrupaon. The server shso emsrs its completion state 1918. 

On She regaester sde. when ®w» ar* no more slocks to f«c«ive. the r-equaster commits totfts transaction tn state 
1-81 7 if itis reqisfifStw dates ^-sornmyracaticns tanars si this siste. at reports She fattum so its credit server <rs state 
1 & s 8. Pnt st::i commas loth© transaction. When n has cornrnitses. a sends m acknowledgement message to the server. 
* The server she*! enters lis completion stale 1 519. 

The kssy property is that both she se:var ancf tr>« requester caocei a f ransaerion if is inssnypied before sit of tfta 
data Ploeks m> delivered, and wiwm to- ft if alt of tbe ststa blocks have been dasivered. 

There is a possibility that ihe server wis hav» sen? an of Sis data blocks Sand comrnfttad} Put m tsqusster wS not 
hsvs rscaiv&d ait of them and wiff carscsS the transsstiort in thrs case. eoto repositories wtt prasemabiy detect a coro> 
?<5 rrtarijcaticro faHtire and report is to their, credit server. This ease w$ prc&abty foe rare sines k depends on very precise 
timing of tfts communicates tgtture. The only consequence- wsii be- that the usee at the requester repastoy my want 
lo request a refund from the- credit services - anci the csss for that reftsnd wii be oocumeniad by reports by focsm 
repositories. 

To prevent ioss of cte, tha server shoaid not detets any transferred dtgitef wws unlit f«c«tvin$ toe fmsi aacnowt- 
« sctgsrrtsnt from the request* Sat it &i&© shoutcs not u*s th« f«e. A wet) Known way to deaf with this situation is catted 
' ! Swo-phase wnmif or £PC. 

Tyso-pbase commit vsorfcs as toiiows. The fast phase vwxks ihe same as tria method c-esenfesd arjove. The server 
sends an of toe data to tiie requester. Both repositories mark the transaction (and appropriate fites; as »rtccmmit$«d. 
Ti?o esiva; ser-ds a feady-io-cotasTsfi nios;ss9«> to the requests; The requester sends Peck an ackeowindgorneni. The 
28 ssivs; then commits and sends the req««stsr a oommif: massago When tha s'spysstor rooeivos tha commit mcssarjo, 
a eomrnits the fife. 

it tPare is a cornreunicaiion iamim or ofhsr crests, <he soqeesier must check back wth the server ts ti&mrtiim ttra 
statss of the transaction. Ida server has fhe fast mm on tnis. Tno requester mey have facos\red aii ef tha oafa. Pat it 
it did not got the final nisssags, ii has not committed. The ssrvercao go ahead and Osrfete fssss (exocet for trsnsactsor? 
feaordsf rsnca it cofj»nsts. sines the fibs are known to have been fniiy transmitted before starting !he 2PC cycis. 

Taere are varustions towm fa the an Kdich can as i=sea to achieve the same ottec!. Per oKampie:. the server coaid 
use an addttionaf isvet oi encryption wnsn transreirfsng a wotk to a eiiens. Oniy s'tsr the clisnt sends a message ac- 
knowiadgifjg recess- dees it send the Key. The ciiwst then agrees tepay for tho dipsfat work. The post;! of this vanation 
is M :; previdss 3 cisar mM traii tnat tha ciieni i-eeeivod the work. For torstsd sy stores, however: this variation adds 
-Si> a isvei of encrysjtiori tor no reai gain in accountabrfity 

The trsnsacison for specific usage rights are now discussed 

The Copy Transection 

-ts A Copy ifsnsaction is a ree-yssi to make one or rriofs independent copies oi the work with the same or iesss; 
usage r;gt!ts. Cosy differs from the a>strect:cf3 ngt;; jSsscussed iater rn ttxst rt refers io erritrs dig:fai works or entire folders 
containing Oigital works A copy operation cannot be used to remove a portion of adtpifai work. 

* The reqnestor srsnds ihs server e massage to snrttata tha Cqsy Transact ion. Tr?ss nrrsssaga mrik^atse fhe wx& fo 
•so ao oopioo. -no ver sion of the eooy right io !>s esoo tor the transaction, the destination address ^formation (iooaiion 

in a foidsf} for placing the work, the fife data for ihe work {incinding its sixe), and the number of copies requested. 

♦ The repositories pehorrs fhe commce opening fransaetloa steps, 

• The server transmits the requested contents and data to the ci:ent according to the ifansmission protoeoi if a 
hSexh$eiC>i--R:C;P!« ties been provided m she version of ihe aght, those riphts are frsnsmined as the ngirfs for the 

*s work Othsr^tse, the rights oi the oripsnai ere fransmrtfed. in any avent, trie Copy-Count fiaid for the copy of ;ne 
dl<gita! work oosng soot ngnt is set to fhe mirnbgr-ohcopies reotiested. 
» The requester rocords the wor kcorrierns, daia : ai5d usage ngtns and stores the work, it recesde the date snci tirne 
tbjst tno copy was made in fhe propoffsos of the drgriai vsork. 

♦ The repositories perform fhe common closing transaction steps. 

;f£i 

The Trsnsfef Trans«otio« 

A Transfer rransaciion is a request fo move copies of the work isrirh the srssTro or isssar asssga rights to anoiher 
roposifofy. in contrast vrith a copy transection, thrs resoSSs In removing fha work conies from She server. 

* The request sends the server a message to inSiaie the Transfer Trartsactidrt. This eiosssrgo iodicaids the wot^ 
to an transferred, the version of the ttansfsr riohf fo he im6 in the transaction, the destination address intorrnafion 
for placing She work, ihe fiie daia for the ms% and the number of copies involved. 
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* Tm reposisones perform the common opening trsrssactKSfl steps. 

* The serysr transmits the requested contsrsis and date lo we requester &cmc&m$ so ttse trsrisrrtiSSieso protects!, it 
a Next-Ssi-Gt-Rtrjhts has bssn provided. those rights are transmitted m-m rugtits tor ttte vsor*. Otherwise, the 
rsgtsts d She origins! am transmitted. 

•5 in srtftur case toe Copy-Count iieid for She jEafiSTmstled fights; are set So the ntrmfeor-oheopses requests^. 

* Tne requester records m» workconteois. dala. and usage «ghts arxs stores the worts. 
♦The server cioerernerns rts copy count by tn* wrtmr of copies involved in the transaction . 

* The repositories perform ttts commot) ctostoo. trarrstjclsoo steps. 

* it the number ot copies remaining in ine server is now zero, it erases trie digitai work trom its mssTiojy: 
Th« Loan Tf sns setters 

A io«f? transaction is & mechanism lot ioansng copies of a digttai work, The maximum duraison or ;he ksm is de- 
termined toy an interna! parameter o? trie #Cjrt«J work. Works are automat icaiiy returned aster a predesermtned ;-m® 
« pence. 

* The requestor sends the server a message to sosrete ins Transfer Tiaasaotsom Tms massage indicator sne work 
to be seaned, ;he version of m soar* right to be used in the transaction, tins destination address inicrmatioo tor 
piacirtp the work, the number of copies tnvoive-d. the lite data for iho work, and the period of the loan. 

28 * TPs server cheeks the validity ot the requestso loan period, and ends with an error it the period ;s not vaiid. Leans 
tor a toansei copy cannot extend beyond she period of the original ten to the server. 

* The repositories perform the cornrrson opening transact**' steps. 

* The server Jrsrssmsts she requested contents ano data So She requester: is a Nexi-Sei-Ot-Rights has been proviosd. 
those rights am transmitted as the ngrsis tor the ^ofk Otherwise, the fights of me original are transmitted, as 
modified ;o te«eet the km period. 

* Tne requester records the oigiSai work contents, dais, usage fights, and loan pencci ana stores tbe-w»rk. 

* The servor tipdases the usage rights information in the digits.: work to rerisct the ourrsDsr- ot copies foaned out. 

* Tt<8 raposiionas perform the cornrrion dosing Siansaction steps. 

* The server updates the usage rights oata tor the digits! work. Thssrmy preciiide use of -he work enfji if is r©i«m«*s 
-se f;om the iorrn The user or; the requester oietform cer; now use the hansSsned copies os tho cStgitai work A user 

•5ccss;;ing ine origina! repotsi-rxy r;annr>t iise She ■digital ao* . unless thssre am copies rernaining. Whas happons 
next depends on the order ot events in trrns. 

Casoj_. ;■ ;he time ot the tean psnod is not yes exhausted anO the requester sends the repository a Return message. 

* The return iTseasacje iiiiciuaos tt;?5 ropuesier iderssiiicatiOsn, and tt>c tiansact^ri iD 

» The sorys:- deo^errienss the eopies-in-ose i'^ld hy the number ot copies that ^eie rotcmed (IS the nun--do:- o? digital 
works returns*) ss greater than the fmrrsbsr acteaiiy borrowsd, ti'iis is treated as an emx) This step rnay now meice 
ttso workayatfebie at trte server tor ossser users. 
•so * The requester deaefivates its copies ano removes the contents Srorn its memory. 

Cass 2 . it ttse tsme oi the km period is exhausted and t;e raquoster has not yet sons a Betum meaaage. 

* The setvet dscienjents She oepias-m-ese sieid by the nsrmbsr dsgiiai works ttust ware twrowsd 

* The ieoiiestei auioiTitiiicatty deaoiiytjfes its copies os this digital work, if taiminaies aii cijrrent tsses and erases iha 
dl^te! work copies from memory One question is why a requester wouid ever •stem a work earlier inan ipe psnod 
of she ioan. smco it wouid be returnsd autoriiaticaliy ar.yway Or;e reason for mxiy return is that shese msiy be a 
rnstsrod ice amfch detsfrfstnss the cost of she kam. Returning early rtitsy rsduer; thaf tee. 

S5 The Pfsy Ttmmsttkm 

A piay transaction is a request to use tne contedfs of a work. Typicaiiy;. to "jjtay" a work is to mm she digital work 
through sonse ktnd oi transducer, suon as a speaker or a d«;piay dsvice. TSse reqijest impiiiss the intenibn !ha! the 
contents will not he communicated digitaiiy ic any oiher system For oxampse. they wilt no! s>s sent to a printer: recorded 
•ss on ar?y digisiii rnediuist. retairsed attar ths transaction or sent so snotftar reposifory. 

This tem> 'piity" js nasrirai f<y sxampies iike piaysng niesjc. piayrng a movis;. or piayseg a video gr^nie. The generai 
lorn ot piay nssens that e 'player* is ysed so use the qigitai work. However, the term piay oovsrs aii media ens kinds 
oi recor^srsQS. Thus orse wouid "jprtay" 3 digital won?, rnsanirsg. so render st for rsadmp. or pray a computer program, 
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meaning >o-8K8c«te it. Fof a dsgaai acust ths pisyar woate se a d«j«8i ticket agent 

* The requests ssnds She swer a message so tnittat<s tn* psay t<ansscsiorv This message indicates the wars to b3 
piaycd. ihe version of ths piay ngtR to be used in if vj transacts, the ideniisy ot ihe pfeyer heing ussd. and the fife 

* data for -he work. 

* The aer var obsess Ih© vaiidity s? mo prays* idealisation sod the compsEtoifay of the prayer fcssntfffcasior* war ths 
piayer spaefixaSlon in fhs srgnf. it sncis wRh at? etrar * Sheas ars not «siis!act<;ry. 

* The repositorm perform ihs cofnmon parsing {rarostctstsr! steps 

* The sssvsr and r®qtf<sstsr fsaci *nd writ© th« blocks of dasa as reqnesied by ths pteyer aecordmo. to the itarrsmission 
?<5 protocol The requester piays fhs «ofk contents, Mmq 9m piayer, 

* VVhsn m» piayer is tinssf ;sd, sh« afaysr aruS ths rstsuesje* resnwe ths consents ?r<sm their ftwrsory! 
» Ths repositories perform ths cormion etasisa transaction steps. 

The ¥*rm% Transection 

A Fans ssans&ction ss a repussf tc; obtain ihe extents d a work for ihe purpose of sendaf^g, them on a *jsrjoi«f.* 
We ase tha iarm *pmt8r* so the soffimcm eus«s of writing: wfth ink on papa: However: tha h«y aspect of "ptBKbrtg* 
in ow asa O: >he is that it mate a copy of She digits: wsrk ttt a piaca outside of fna protection of visage rights. As 
wth 8i! right*: this may require pariicaier auifion^anon eeriiiieatss. 

Onca a tfigHal work is panted, ths pnhisshsr sod >.mt urn bound ey whstsvaf copyright iaws are irs aftssi. Howsvsr, 
panting moves ths contents outexfe the centre! of repositories. For sxampie. absent any other enforcement mecha- 
nisms:, ones a digbai work is pmtsct on paper, ft cars be copied en ordsnaiv photocopying aiashines wrif -out (nservs^trao 
by a raposifary to coiiact usags taos H ths porstsf to a ciigisai «sss is pera'iiiioa. ihers thaf Gigiiai copy ts oatsfds oi ihs 
ooniroi of asaee fsghts Both ;ne enjaior and ths user know trtfe. afihoagh ine eteaior doss no? nsosssatiiy gn& tacii 
ooasanS !o sash eapying. vsiitsf; ■rttsy vtoiaia aopyr:gf;! iaws. 

* The ^quosiar sends ihe servsr a messsgs to snSia?s a Print Transaction. This nrsessags saSicajes the work to be 
piayant th« sciantsfy c* ths printer fining nsad. ti'sa tiia tteta for rhes work, and ihs numbs; of aapm in iPe faqyasf 

* Ths server ohsoks ihs vsiidiiy <$m printer (dsniitscaijon ana ino coniprstifssiity o? ths pr istsr sdenfitioatiGn with ihe 
as pmw specifieasion in ihe nght if snds with an error if shese are not saiisfaeiory 

* Ths rapositonss psrforrn ths somnicn opanirsn transastion steps. 

* The servar transmits biocks of data aooorcfing to ihe aiinsmieeion protocoi, 

* The • aqnestar pnnfs ihs »»rk ix>ntants. nssng ths pnr iiar 

* Wnsn ihe ptsnw is fsnishssi, ins printer ano ;no rapasstar remove ths sonfanis tiws :h«if rsaa'iOfy. 
;k * yne reposisortes perform ihe common ciosing iransrsetion steps 

Th« Saokup Trsn&sctiori 

A Saskijp transaction is a tequsst to mates a naskap sapy of a dipjiai wark : as a prc^scticsf} agasnst snodla tasiara. 

•so in ihe oonisxi ot rsposiiories.. sesurs baskap copies cater from oinsr aopiss sn fhrsa v»ays- {1} f hsy srfi macs rinds? 
the controi of a Backup iransaefion rasher than a Copy transaciion : (2> they do not coum as repuiar copiss. and {SJ 
Shay ars not nsabis as s'agsriar napia:s. Sasiataiiy. baskrip capm ars ansrypiaP 

Aithough baokhp oopsas may ba jransfsrrsd of copioci. dependiag on their assigned fights, she oniy say to make 
them asefni for piayinq, prwtioq or onjbaddsng is fo ioefore ihwr 

^ Tho osfpyf o# a Baskup cpsraira; ss rxsth aa srssrypisci data fits thai sosPssns ths sontssfis asx; dsscs spiiar; of a 
work, and a restoration fiie with an encrypsion key for srttts^ th© enorysfap contents, in many cases, ihe sncryf>ted 
da;a Siia would have riptsis for "priniing' it fo a dssk outside of the protection system, fsiying jast on its encrypttea for 
aacsjasy. Stjch iifss soirid tie stored anywheres shat vras physicf-iiy s-sie and coavanlent Ths fss&>f3tJ0fi f«e ajowkt no 
tjsid tn th* repoaiiory Ths fits ss necassary fo- the ■ ssionssiors of a. backup copy if nsay hsw© n^its for irsasfar baiwaan 

5P i-asxssiiorrss. 

* Ths requester sands the ssrear a m$ssaga fo inifsate a bsokep transaction. "i"las niessaga sndicaies the work te* 
be sjasked sjp. She vsrsson oi tfia backup nghi fa be ysed rn fha trans fie;fc)n ; ihs dasiinatson address iraoraiafion 
for piacing she backup oopy. fha tlia dats for she work. 

* rps -apositoriss perform the eorrsri-ia;; opan^ng frai5saciion steps. 

* The sarvsr transmits ths rsqnasssd sontsais and datatotbs raquassar if a f^axf-Sai -Of-Righss nas baan p> : ovfided. 
those rigms are triinssTfisted as th® fights for ths work Otherwise, a set of ppsarsi* ngms for backup sties ot She 
ongfnaf are tranarnistsd by tha sasvsi. 
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* Tm requester records the wfe contents, data, ami usage rights, it then cream a ons-tims key ana encrypts the 
conteftisfite. !t saves me key Mtmt&KXi m a restoration faa 

* The repositories perform th» comroen 0*35*1$ transaction steps. 

•5 if} some asses, si is convenient to be able So archive She targe, eoeryp-eci contents itie to secure ofttne storage, 

such as & n-iagrseic-optiQai storage system or magnetic laps. This cfestsooota nort-repotttery archive itse is as sectors 
as- she encryption process. Such riomseposifory archive storage m considered a forr;; of •printtnjr* and is controiied by 
a pen! ngni wth a speeded ^fcnsve-pnntsr- * Afvarc:5!ve-prifi:eajevKSis ;3roQrary5fT:isdto3;5ye me encrypted contents 
fife mi not ins description tsie) otitice in such a way thai it can oe retrieved. 

?ii 

The Restore Transaction 

A. Restore transaction is a request tcs convert an encrypted backep copy oi a digiiai work into a lisabie cespy. A 
festers operation is intended to fee used to compensate for catastrophic m«d>at«!ti3ra. t.tke ait usage rights, restoration 
« rights can include fees and access tests irtciuairtg authorisation checks. 

* The requester seno's ids server a message to tniUate « Restore transticttoa Tm* message indicates the work to 
he restored, the version o! the mtotz right tor the transition. tee «eslirtsiion address wtiotms&m ?or piacang the 
work, arsd the m data for ?he work. 

* The server verms teat the contents i-te ss avaiianie h e. a, digstai w-orii cerfssporidirig to the request has been 
eaeked-rip.) it ft is not. it ends the transaction with an error. 

* The repositories perform the common qpenlsig tiarisachor; steps. 

* The server retrieves the key from ;ne resioiation file, ft decrypts the work contents. da&. end ns&pe rights. 

* The server transmits the rsqusstea contents and data to ths< requester according to the transmission protocol, it 
2* a Nex--$«t-Gf -Rights has heen provided, those rights are transmitted as the fights sot She work. Otherwise, a se5 

G: de-auti righls tor bacsnp files otitic origins! are transmitted by tils server 

* The requester stores the Sigstai work. 

* The repositories perform the common closing iirarisactios) steps. 

se The ttetete Trartsssttea 

A Dsieto tianssction cfcietes a digits: tfoik or a number oi copies of a ckstai work irom a repository Praeiicaiiy at! 
digits* works vsouSef nave delete rights. 

;?s * Tfvs requester sends the server a message to situate a cisisre traiisacisort, This message inai&atss the work to no 
deleted, th® vei sion of the delete rigtif for the tiensacfiori. 

* The repositories perform the corrtmon opening transaction steps. 

* The as; vet cieleiea the fife, erasing it ftom ?be file system. 

* The repositoises prsrforrn !he norfiinof; niosrng transaction steps. 

Th« Dkmtxxy Trartsaction 

A OirecroiY i:rar!8action ss a request for intormaiion abotit to'dcrs, orgitai works, and their parts. This amounts to 
roughly the same idea as protection codes in a conventionai fsis system tike TEtMEX, except that it is genereiiired to 
tne foil poser of the access spsoiheations of the usage ftghts ienqirage. 

The Directory transaction has the important rote oi passing along descriptions of the ngnts anci fees associated 
with a digital wo; k. When a uses wants to exeidse a right, the user intsitace ot his repository irnpfciiiy makes a oirecioiy 
request to detcrnitne the versions oi the nght that are avaiiahie. T^itsaiiy these ere presanied !o me- user - such as 
wito different choices of billing fos exercssirsg a right. Thus, many directory transactions are trwtg&te to the user and 
ate exercised as part of im normai process of exercising at; rights. 

* The requester sOi'ids the server a message to initiate a Directory tr&rtsaotioYt. Tbts message indicates the file or 
iokier that is the rorr; ct the directory request isnd fhe version oi the directory right used for ;he •mostictscsn. 

* Tne server verities rhat the inforeiation is eceessfes to rhe requester in paqiceSaf. it dees not return fhe names 
■«« -of ;ihy iiies tttat iiave a BSQE-NAME status «t fhe;; diiectery speeiheatidns, and it does not return fhe psiffs of any 

iokters or files thin': have HfD&PAfiTS in their spacificef ion. it ihe iRforraf-ifon is not accessible, the server ends 
the transact ion with error. 

* The repositories perforre lbs eommoft oper^ng fransaction steps. 
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* Tm server sends srs« requested <*m to ihe requester aoesfolng to the tr&rssrrassiQf? protoeoi. 

* The raqsi^stsr feeosds to* efefea. 

* The repositories perform the comsr-en ctossno; transaetKm steps. 

a Th® Foidor Transaction 

A Fdd«f transaction ts 3 request to create or rsnsrrss a fo&et. w to toe a work between foide-rs. 'fog-steer «wth 
C-ifeoion/ ngnis. Folder fights control the oeome to whten organisation oi a repository ear» oe aocsssss! or modiitsci 
horn another repository. 

?S 

♦ The requester ssncis toe ss«v«{ a message to iMs a Foioer it ansae! ion . Tf-;s message- indicates trss tender that 
is tin* root oi the foSder request the version of the holder nght tot ths transactor}, an operation, and <3st& Ths 
operation can be one of create, rawne. and rows fiia. Toe date are lbs ap«cri:catlons- fequi-e-d tor she operation, 
suon as a spsejhoaSion o! a iolder of digital work and a oarr-a 

« • The repositories perform the common opening transaction steps. 

» The server porfosrfis the rssqassted opsraskxs ~ creating a totdes; senaming a totcisr, or tnocwtq a work beiweeo 

♦ The repositories perform the common closing transaction steps. 
Th>3 Extract Tretnascttrwt 

A axi-aci transaction is a request to copy a part of a &gttai wcjfk and to create s nsw wotk containing it Ths 
sxiranPon operation t$mm trom copying sn mat tf can w used to separata a part of a tiioftai worts from d -brocks or 
sheiis that place atSdttfertat restrictions or tees 00 it. The extraction operation mm frost! the edit opera? tort in teat it 
doss raj! change the cor-tenis of a work, or-iy i!s ambsdd:ng in d-bSocte. £>;lfaoison creases a new digftal work. 

♦ The requests? sends ins server a message to initiate an Extract transaction. This message indicates -he part o! 
iha work si) an extracted the vers:oo of tr-ra extract fight to ba used m the \mtmctem. the destination address 
in formation for piae-ng tee part as a now work., -no !m oata tor trie work, and ;no number of copies invorvsd. 

s>? • The repositories perform the common opening transaction steps. 

* TPs sa-ver transmits tho roqaesled soatas-sia and Oata to the requester ssocot«rtg to fha iranssTiiaabn protswt. ii 
a Nejft-Sst-OS-R?ej-(ts has been provided, those rights arc transmitted as toe fights tor the new wwk. Otherwise, 
iOengOis of theonpirinSa rot-arismrRad Ttse Copy-Coat v, iieiO fa; thisrsgOs is so! !othonumi5or-oi-copi8B i aq-joaiad 

* The reqaestor records the contents, dssta, ood asa^s rights and storos m \mrk tt records ih© dats and time that 
new vsorK was made in tee properties ot the work. 

♦ The -eposiSoiies perfotrn tha cortsiKs; csoatag tainaactios's aiepa. 

the Efflbsd Transactsoft 

•so An ofnned transactsos's is a rsqi-sst to maivo a Osgttai wort? become a pari ot ano-ner digital worf? or to sod a shell 
d-biock 10 enacie tee adding oi fees sy a distributor oi toe work. 

• Tha :epceaier eende 'he server a nisssaye to inifiaie an Embed transaction This, message :od:c.«!es the A-o>-k is 
be erriOeddeO. the vessios's ot the srr&sd jighi to be aaed ;n iha iraiiseetion. she deelinatien adefrsss sr;iora^aiiOi5 

■rs tor piaoii'ip tha par; as a a work. srs« me «ata tor the work and tno wfttm of copsos snvoivad. 

♦ The server checks ihe oonifo; specstications for ail 01 ins fights tn the part and ths aeshfssiton. if thsy aro mcoro- 
p&iihse. th« easves sods tt?e isBnsaePor; wfeh at) efrc;: 

* The repositories psfforrn the somrnor; openiog iransaciion stsps ; 

♦ The server trsfssmsts the ■^qrieaied co;?taois and data to ;;?e ;oqoester according -o the iairsmiSSion protscoi: it 
5® a hi&st-Sai-Of-BiQhts has oeen pio^sdssl shoss agnts are transmitied as ttio fights tor ihe new woris. Otnsrwise. 

the rights of thsofipioai are transmitted. The Copy-Coasii -tsidfor this right tsset to The rtemdsr-oi copses reqiiestod. 

♦ The ;'eqoe£i8r iootade tise contents, data, and rseago sights and embeds ihe work in the desSsnsi-on m. 

* The fspessitorass pastor m tiso comn-on ciosing iranssctioo steps. 

••^ Th© Edil TtafisscfJon; 

An Edit traiwaetion is a request to make ,a new digitei work: by copyioct seiectiog and mociiTying portions oi an 
existing digits} work. This opera-ion can aetoaiiy change the contents of a digitei work. The kinds of changes- that ara 
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permistsd dspsnt! an the process ostno. used. Like she extraction operation, sds? operates on portions otssdiojta! work, 
i n contrast; wise She exf/asf opersssion; sdfl does not effect th« rights or iooatiors of the work, itmfy changes the contents 
Tb* ksncis oi changes permiiSfiK* are cfetofrrtmssi by she Sype spscfScssenof ihs processor spscifssri «rvfn« fights, in the 
currently preferred embodiment. %i edit transaction changes 'ha work see;! and doss no! rrtafce a new work. Howsves 
•5 it wouid be a reasonable variation So cause a new copy of She work to be matio 

* Tha raquesfef sends ths setve-r » message So sntttais a;? Edit trartsscftGO. This massage indicates ths work fc> he 
srisfocJ. the vorstort of ttis c-dif right So be used in sns transaction, me file data tor the work {(octuomg its siite}.. rhs 
prooess-fD tor ths procoss. and ths number of copies invoivsd. 

?<5 x 'ipe servor checks the compatibility of the process-ID So be used by the requester against any process-iO spaci- 
t'icanon in the right if they are :ncomp8Slbis. if ends tee transaction wish m error: 
» Ths repositories perform ths common opening transaction steps. 

x The requester uses she process to change ;he contents ol tha digital w>rk as desired (For example. ;t can select 
and duplicate parts of si:, cotv&m* « wsfh other iofotmaiiosi; or compute functions based on m informs* ion This 
« can amount So eci'iincne*;. mas*, or pfctum or isklng y*hatevei other stepsare usstuf *» tr<ssftno. a cisrivsisvs work j 
» The repositories perform toe common ciosing transaction steps. 

Ths edii transaction is used So cover & wide ranee ot Kinds of works. The cessCjOty describes a process that tsitss 
m lis snpni any pestwtJ of a digital work and then tnodifias tha mpa! in some way P or example, lor sex;;, a process so; 
editing She -exi would tsqoire edit ugrsts A process tor 'summarizing* or ooenting wor<is in ihs text wo-rid tsiso bo 
consrdored editing. For a mrisic fsie. procsssmg cosiid snvolvo changing sbo piioh or tempo, or adding csvafparasjons, 
or my other aadro eifecS. For digi-ai v:dao wosks. snytfiing wh«sh aitsrs ths u'cage wouid seqeite eo';t rights. Exan-ipias 
wok® oo ooiori2ing. soaiing. OKSracSmr; «t« phrstcs. soiocssng sod combining frames snto s-ory oosrtis. ersarpon-ng with 
signai procps&ifto, and oo on. 

Ssmie creators may mtft so protecf ttso anthtsnttcity of (bw works by limiting tha kmis of processes tf-at car'; he 
perf omieo or shsm. if thsrs arc no sdii rignts, then no processing s aiicweo a; aii. A processor idsniiSier esse be sndedeo 
so opacity what kind of process ts ailowed. if no process identifier Is specltlad : then arbitrary processors can be used. 
For an exarnpla of a specific process, a phoSograpber may waif to aiiow iise of his phoSograpb but may not want « so 
be co-on^sd, A musieian msy wans jo ai-cw oxiracSion of eoriions ot his wors be; not changing of ;po sonaiiSy 

$%> 

A it ihor ixat ion Jtm ssc i ions 

There ate many ways, that aef nor f;saS:oo -rafisactions can be dslloeci. in fhe foifowmg, our preferred way is So sirnpiy 
bef-no inom »n isrms of other ;ransactione that we airsady need for riSpossfories Tho& it is conveniens somoSimes so 
;ss speak of 'auihoritsatioa •rsrasactions." but they are acscassy niase up oi otfcsr transaotsosis shsf roposssor ses already have. 

A usage r:gt;f can specify an auiboflsationhD, wfiich tcfentrftes an atiShorkauon objesci (a digiSai work In a file of a 
standard format) thai She repository must have and wnsch It must procsss. The asjftor«ation is q&m to the gsnerse 
atehossoation /or ticket) server oi the repository which begins to irsSarpreS She aothortfaSion. 

As siescrsbod eabirsr. the arithtsritratlr^n rx^Sems a earner irfoniifiisr wrsscb may just be the generic authort^aslon 
•so sorver or n may be anosher servor. Wnon a remefs authortzsston server ss ropLiired. it must contain a dlgitaf aodmss. 
it may aiso contain a dlgntaf certificate. 

i! a ramose authoraaSlon sesvet is tcqeiiod. then the auirtateaftori process fsrsi petionns ttje folli>wl?ig sseps: 

* The gansilc anthoraaslen server aiteinpts to set up she cornmunicatioes channel. • iff the channei cannot he set 
*s ttp. then ;».n:horKa;)on fails with art error: j 

* When ;no channei Is sot up. it performs a registration process wirp the remote repository, fit regies raSiop telle, then 
She authorization laiis writ? an error-.; 

* When registration $ corepiete. ths gensrte asjjhofixate aen/er invokes ts 'Piey" smnssctsoR with ths rsmose re- 
pository. SLsppiyirtg the authorisation docurrwst as the btgitai work to do ptayeci, arid the mmote aothorwss bn setver 

Sri fa prograro) srs -he 'pteyer/ fit She piayer canno! bo found or has some oihor erroc ihen She aufhciiHaSionffiiis with 

m enoc} 

* Ths aothorittafion server thee "plays" the authorial Ion. This Invokes deorypilr^g Is ussng sliber the pebiic key of 
fhe master fepoBisory that issued tire ossificate or ttre sesame key froi-r; the repository that f:ransre;i:ed it Tha 
aushorsration servsr then pehoriTss variops issss These tests vary according So She authorization server. They 
include such steps as checking issue arid valkiify dates of tt» ay thereat Ion and checkif-g arty hoHists of kr-own 
rnvaiid authorizations: The f-rrihortfssSion server may require carsyinp otii any other fransrjetions on fhe repository 
as west, such as chsokio«f directories, getting some person to suppiy a ossswoai or playing some other diojtai 
work It may aiso invoke some seeeiai process for checking mforrnaboo about iocahoris or tccan; eversSS: The 
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"scnpi" for susti steps <$ contained wsthln srse ayttwizatjon wwf. 

* if eli of the reqnsnso' steps 3m eomplsfed setistaaorsy. ths atiinor -;?at:of • server eernpfrsses the transaction nor>ri8;ly 
si^nai-ap, that auihor«syon % granted. 

An inssaii ;ss:'s;j3cti0f! is a request to inssaii a digital wsrk as synnshle sofiware or; a reposisory. In a typical ease, 
we requester repository is a rsndenrre. repository and the sofiware woufb m a new Kind or nam versfon b* 3 psay^f 
Afso « a typical esse, the sofiwars vsousd fee copisd to fife system or trie requsster repository oetore it is insiafisd 

* The requester sends she server an insiaii massage This message ifSiSicases this wotft to bo irsssalied. the vetston 
of tb* insist! rfahi nemg mvofcso. and the fife <sa»* for trie work tirwsudms its Si«e}. 

* The repositories perform ths cormsors openinc. trarssachon steps. 

* The repsjcsier tracts a copy ot she dipef certificate for the software, if ths certificate cannot ee loners or she 
« master reposiKxy for ths cpi-ilfieats Is not known to i he reQuester. tn« transaction ends with an srror. 

» The rsqseste; decrypts ths digiiai certificate am\g ihs psoilc key of tb© master repository, recording She identity 
of ths supplier ar-ri creator, a fesy for decrypting me software ths cornpaiidiihy intoanaiien. ano a samper^hsescieg 
sods. {This step certifies ths software. ) 

* The requester decrypts tfie soft ware ssinq tfta key from -he certificate and computes a check coda on it using a 
i -way Mash function, it the cfcsck-ccde doss no! mason toe tampar-eneckina. code fsam tha ceasfscate. ths insiai- 
iatlon transection ends with an arret (This step assures that ;:hs cements of ths software. wteJmg the various 
scripts, have not been s&repered wm.\ 

* The requester mrmm tha instoioticms in tha eompatihtisiy-ohackinp. script ana iaitem 9mm. if tha software is not 
sompatihis vvrth ths repository, ihs instsiistsion transaction snds with an error fThss ssep cdscks piattorn': eon^pat- 

ss ibiiify:) 

* '"no rsqusstsf rssneves ths instfucfions tn ;no tnsiaiiistion sorsp; and faiiows them, if there is;sn smy-.n m» process 
tsucfi as tnsstficiont fpsoyrcss;. fhon the fransaofion ends witft m error NoifS that ths instaiiatlon p;ocsss pstsihe 
ruonaeia soli ware sn a piace in ths repository where- it :s m twge* ace«ss;t;!e ae a work fos exe:o:s«-sg any usage 
fights ether than ;ne axecu-ian of ths sof-wara as par! of repository opsra-ions in earn/ina. ou! othsr sr»rss3et(ons. 

st> ♦ Ths repositories perfects the sormwn closing transaction steps, 

Th« Uniflstaii TrsaarjetsoH 

An Ui-iinstaii ireaaactson :a a fsqesattoromovssopwafafrorn ?! ropository Ssnca uncontfoiiep or mor-rsst removal 
;k of software from a repository eoufo' compromise its Pehaviorai integrity this step is eomroileO 

* Ths requester ssnos ths sstvsr s<n Uniiistsiii message, rhis message indicates ths work to bo snineiaiiop. ths 
version of the UnmsssS right being invoked, and she fife dass foi" the work fieoieding its size). 

* The repositories pastorm She norrimof; ;speninq irsfwactot steps. 

•so * Ths fsqasstsr extrscts a copy of the tfigjfc&f sorriiicafe for tS-re softvvsre. if ins ceriifisate efionoS fee foirno or ths 
masrer rapository for the certificate is not known to ths requester, she i--ssnssction sno's wsn sn error. 

* The requester cnecks wnetfjar the software is instetiaci. if itia soiivsate :s rrot insMed. the trari&echon erafs with 
an error. 

* The reqeeste! decrypts the dipjsai certificate rsssng the psbflo key of she master repository, recording She identity 
of Ihe sappiieranrf are-stoi. a ksy for daarypfsi^ fne soffwata. tha eorepatidiiiiy infoiinjiiian. enci a iiirriper-aheckiag 
sods. iThts sisq acthsntieafes \m eshsticaiion of ths soffwars. ineiscting the scrips for nniastaiiing is ) 

» Tf;e rsquestet deerypss the software ssing ifje key frorrs she oehlflcate snd cor;rpsSes a check coda on :t esing e 
f -way hash Iwm. if tha chsak-eode rfoes no; mstch tha tsimpar-oneckina code {jwn ths cerlifinsis. ths inssai- 
ta;lon irarrsactiP;? ends with an error {This step assures that she contents of she sottvsars. mteetmg %m various 
se sarspss. have rn& bean tampered with.) 

* Tno ieonesser remsyss sne insifirctiorss in ths unlnstalfation seritst and toiiowrs ihe;«. if thsre is an error in this 
p;»cess isoah as inefficient resoyrees}, rhen the traiisacslon ends wtm ee ersor. 

* The rj^cssitones perform tfia conrnors closing transaction steps. 

etssms 

1, A nrethod for ooniroiiinsi access to end dietribuiiPi^ of a composite digital work, said eomposiio dlgliai wo^k«om* 
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prising a piufsiiiy of parts, said meriiod comprising the stsps or: 
a> creating a composite digital 

tt) creating a description structure iof sakS composite digital work, said descriptor! structure comprising a 
•5 pHeakty of description blocks, each or sad deacriptran biceps storing access itiforfnaliori for at feast one of 

sasd piiJ«;iiiy parts o! said composite t%8&i work: 

c) aierrag sad description structure and said composi!© diqstai work to a repository: 

d) sate; repository receiving a request to access said composite d;g>tai «*sk rc-o^es; having one or mer« 
request ssstf-bsjtes: arid 

?<5 e> said repository dewrflfairtg « said request may be §ranSed by examining the access in'on-natoa lot each 

description uiock of ma® description siaicfs.ire of said composite digitai work mtt respect to ami one et mores 
r«qu«tsl aitf-ssjiss o? said request 

2, Th« method as recited in Cfcsim 1 sffterssn said step of crossing a eomposlie digitai work is further comprised oi 
« She steps of: 

a f } creating a first pari oi sasd digitai work. 

a2; crsaiing a firs; description bioektor said first psrtof said composite digsiai work: 
aO} obtaining m existing secoad par; for aaid oor^otte digitai xrartt- said second par; of the digital wwk having 
28 a ssoood description ofcck; 

Ss4) combining said first part and said second pad to form said composite dsgitai work: and 
aS} eraaisng a %\M desctipfsor; btock for sa»d composite dsgrtal work. 

3, The method as recked m Ciam-; 2 wherein said step oi creating a description structure for sasd composite dtgstai 
us work is futihet comprised of the siep of knlarsg said mi de^t^tton blot*, said second deseapiion block and said 

third description hiock io correspond So the organisation of said composite digsfai work 

4, The method as raeiiad h Ciais-u 3 whetem aald stap or atonag said description ssructirrs and sasd cornposiie digitai 
work in a repository' * iurtoer comprissO oi ids steps of storing said description structure sn a tirsi storage rnsans 

s>? and said composise digita; work in a second storage means. 

$, Tne method as rsciteti in Diarm 4 wherein each of said first desenptlon Piock. said second description biosk and 
aaid third ciasenp-ion tjjock :s comprised oi a posiiar io a corresponding par; oi said composis® Oigisai work stared 
in said second siorsgs rnsans arses a corstroi iniormaffon pari icr storing asage ricjhis for sa-d corrs soon dsn g pars 
;rs oi' said dkiJiai work and said step oi crcaiiag a first ds-sedpkon biesk for said iifss part oi sstjtd composite dig^t work 
ra txmw tsxTiprisad of the step oi saaosiymg a firs; sat of tssags ngtns and sionng in said eoriirai information pari 
of said itrsi description iacck 

8, The niatnod as teefifai ta Ciaw 1 wharaio sasd stap of croating a description structure tor stssd composite ttsgrEa; 
•so work is fariher oorjiprisod of tho step oi adding a shsfi description biook for spsoifying s.ssage rights and fees oi a 

disiribyior of sard oosTtpesks drariai work. 

?, The nieihod as recited >n Giasm 2 wnstein said sicp of obtaining an oxtsting scooad pad for sard composite dsgkai 
work is faslha: corripfised oi the stop of extrscEiaq said second pant frorri a;? ©xf»*io§ ciigkai work 

8, A raposkory for storing and coniioiisng access to composite digital works oornpr-sirrg- 

an interface stsopos for receiving requests ro . access dirjiai works stored therein: 
a i'i;Si storage nmt for storing digits? data representing digsiai works: 

a second stefage -wnit for storing description structures for digiiai works stared in said tirsi storage aoi!.. said 
dsscfiptkjn stryeturs comprising a pmraiiiy of pescr ipiioa siocks, each of sasd desirripiion biocks ooiTipfising: 
a poiniet to a parent description bieek, one or more poinisrs to ohiidren description diocks : a pointer to a 
rrortssponding part oi a dsgkai wr>rk siorrrd in said first sioasga ijnti and a. usage righis part for sEoring one or 
rnors nsags ngfifs. each oi said usage righ-s specifying an insfanoe of how said part may he rrsad; 
a trariSisciions processor Jot processing, requests to arxoss a diaitai work, miti transardioas proeessoi com- 
prising a means for idauiiiysng a asage right from a request io access said dsgitai work., and a mersj-ss for 
dsrarrnining if a deseritJtiori biock cm&m an idsntiiied asags right 



2? 



EP 0 715 246 A1 



Ths fspostso^as fscitsd in etaimSwNerew said transaction processor fetufthsreompfSssd" or asage r ights centiioi 
rasoitaor! tsws tor jsseiwg usage fights sonlltels osawosa m&wi description bta&s. 

A system for centreing access to and ussgs of composite digits: works : saicf composite <5igtsa! work comprising 
a piuraiify d digits) works, said system compsising: 

aieans to; attaching usaqe riqhts so digitas works, ssttcl usisgs nghis ineJIcsts'sg how a recipient d a digitai vsratk 
may use and stibssqusrttiy distntstrte s&scf dsorra; work: 

mssiis for craving a oescnpsjors stsucturo tor saici oornposiSsdigifai work, said description structure comprising 
a dssonpibn stek to; essco digital work ot saidoornposits digfiai work, assd description Mock comprising said 
usage tights lot said digfiai work and aotfressing fniormaifon tcss said dtgitai wwfc. 

a phm irty oi fS0osfior:8S for s-nanacing sxehar^s of digital works based on usage «ghts s&aebsci to said digilai 
works, sac*) of said ptuisaitty oi deKJursorrt repositories corrsp rising a ssorage means fci sionng digital works, a 
processor asking a first server mods oi operation for processing access requests to said digital works and a 
second requeMef fnods oi' opereeen tor incasing requests 50 access drgiiai works, a feefseepin^ ms&rts and 
a connection moons; 

;a tmsiamt} system tor rendering o; pigliai worsrs. sasd rc-nderlag system eorrsprissng a rendering reposisory ; 0 r 
secure receipi oi composite dibits! works and a rendering eevsce having moans for concerting digital signals 
10 srgniais?. saknaia tot rendering of said digital works. 
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